UCS and Syslog on custom udp port?

[Martin Nilsson]

Hi there,

We are currently running 10 UCS sites at various locations and recently fired up a syslog project to be able to collect all events but have halted along the way. The idea was to collect syslogs from each UCS system to the same syslog server. Our approach on how to seperate the sites was to have each system send data on different ports... However we're unable to configure custom ports.

The only way we can identify each system today (by design in UCS) is by its IP address, this does however not work very well since some of the sites are using the same IP addresses.

Is it possible to send syslog data to a custom UDP port?

Would it be possible (in future release) for the UCS to include the system name or similar in the event being sent to syslog server?

Regards,

Martin

[Robert Burns]

Martin,

Currently you are not able to modify the syslog port.  This is not on any roadmap in the near future either.  There would need to be more demand for customized syslog ports, which we don't have other than this request to date.

Regards,

Robert

[yuvalba]

Hi,

You can add me to this request as well.

I would like to send syslog from UCS to a Splunk server.

The easiest way to distingush syslog sources is to use different UDP/TCP port for each syslog source.

It's a shame that it's not possible for UCS, this should be a given and not a so called "feature request".

Yuval

[ericwill]

It is something that is a known issue, and we are working on prioritizing it in an upcoming release.  Feel free to reach out to me directly to discuss this further.  My email is ericwill at cisco dot com.         

[Niall-HN-Q]

Hi,

Obviously this top was open 5 years ago. However this is still a relevant question.. 

I am running UCSM version 3.1(3k), is this still not possible?

Thanks,

Niall

[Niko Nikas]

Hello Niall,

I took a look around and was able to track down this defect...

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb38814

However, it still does not appear to have a fixed release, so it's unlikely the behavior has changed.

--

Niko