We have added Splunk to a monitoring systems and I would like to send my wlc 5508 log messages to it. We have the Syslog Data Inputs on that server are all TCP and we would like to maintain tcp only if possible. I do need to be on a custom port other than 514. We are on 18.104.22.168 on a HA pair of 5508's. Does any on have any insight on changing the syslog port number in the WLC config?
I too am using Splunk for capturing WLC Syslog. With regards to the destination port of the Syslog, I don't know how to change it. However, to get around this I have set up a Splunk Forwarder with Syslog-NG. Basically Syslog-NG listens on any port number/protocol you define and writes logs to a log file name $hostname$.log. This means I could have x different WLCs sending Syslog to Syslog-NG on UDP 514 and Syslog-NG will write the syslog from each host to it's individual file.
From their I've configured Splunk forwarder to monitor each file and forward the logs on to Splunk. You can forward to any port/protocol you wish.
Also remember to do this
config logging debug syslog enable
On the controller. Otherwise you won't see the messages you expect.
We are pleased to announce the immediate availability of the IOS-XE release 17.2.1 for the Catalyst Wireless Controllers. The new code is now posted on the CCO and can be found at this link:
Everyone likes to go fast. The speed of your business, your network and your Wi-Fi is critical to how quickly you can move forward.
In this latest generation of wireless networking, Wi-Fi 6, speed is a focus, but it’s not about just individual devi...
My report tells you the experimental results of the performance of Cisco ClientLink supported on Cisco Aironet access points. You can remember the great performance of ClientLink forever.I have learned that new access points for IEEE802.11ax are Cisco ...
Join us live on Tuesday, March 3 at 10:00 am PT (and on demand after) to learn about how Wi-Fi 6 and 5G will change the wireless landscape in the enterprise? We'll be talking to Cisco's wireless CTO, Matt MacPherson, who will dive into each of t...
Join us live on Tuesday, March 3 at 10:00 am PT (and on demand after) to learn about how Wi-Fi 6 and 5G will change the wireless landscape in the enterprise? We'll be talking to Cisco's wireless CTO, Matt MacPherson, who will dive into each of these techn...