04-02-2024 04:34 AM
Hello everyone,
I have rather specific question about syslog on 9130 aps. I would like to activate syslog on the access points. We have a Redhat Rsyslog, and my colleague mentioned he's having some difficulties, if the syslog string doesn't include the IP of the device.
A syslog messages looks like the following:
2024-04-02T12:59:13.877039+02:00 Apr 2 DEVICEHOSTNAME 10:59:13 kernel: [*04/02/2024
On the APs, only the hostname is provided. Is it possible to centrally adjust the syslog format for the APs, so the ip is included or just the ip is used instead of the hostname? Do you guys happen to know anything about this?
Kind Regards
Phil
Solved! Go to Solution.
04-02-2024 06:19 AM
- It can't be done , because its fixed behavior in IOS-XE , from the controller viewpoint it only wants to report something about a known or registered AP,
M.
04-02-2024 06:19 AM
- It can't be done , because its fixed behavior in IOS-XE , from the controller viewpoint it only wants to report something about a known or registered AP,
M.
04-04-2024 01:18 AM - edited 04-04-2024 01:19 AM
Remember the syslog entry always includes the source IP address of the device which sent the syslog by default (unless you've customised the logging format to remove the source IP) - regardless of what hostname is sent by the device, so your colleague just needs to use the source IP address instead of the hostname.
Some examples at https://serverfault.com/questions/400293/syslog-ip-ranges-to-specific-files-using-rsyslog
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide