cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
18379
Views
0
Helpful
3
Replies

Ironport Syslog functionality

Ronald Nutter
Level 1
Level 1

I am trying to get our Ironports (3) to report to our central syslog server.  I dont see any support in the GUI or CLI.

Is this possible and if so how ?

3 Replies 3

edadios
Cisco Employee
Cisco Employee

From Web GUI

System Administration-------Log Subscription-----System Logs  (name of the log)------ Syslog Push

Enter Following:


1.       Hostname:  Syslog server name or IP address

2.       Protocol default uses UDP

3.       Facility: Choose from the dropdown e.g.  user, local, ftp, ntp ec..

Submit and commit the change.

From your step 3 above, how do we know which options to choose? what does each one mean? e.g what does user or ntp or security  or mail mean? How do we know which one to choose?

Tom Foucha
Cisco Employee
Cisco Employee

Syslog push of access logs will be in an upcoming release of AsyncOS and is only available for certain logs today.

Sent from Cisco Technical Support iPhone App