Our 2802 AP is configured for logging to a syslog server on facility local0 and severity informational. On the syslog server we are not receiving logs at all. In TCPdump we see that the APs are logging facilitiy local1 and syslog10.
Our 1142 and 3502 APs is logging correctly to syslog on the same WLC.
Configuration:
(WLC)
config ap syslog host specific all <syslog server ip>
config ap logging syslog level notification all
config ap logging syslog facility local 0 all
show ap config global
AP global system logging host.................... 129.240.255.238
AP global system logging level................... informational
AP Telnet Settings............................... Not Globally Configured
AP SSH Settings.................................. Not Globally Configured
(AP)
Show running-config
Syslog Host : 129.240.255.238
Syslog Facility : 16
Syslog Level : 6
WLC: 8540 running software 8,2.110.0.