How to Install Cisco Switch Integration (Syslog)?
We will see how to do the Cisco Switch Integration (Syslog). For this, we will do the installation by following the steps below.
The enable command switches from user mod to privileged mod.
1 | Switch>enable |
Global configuration mode is passed with the configure terminal command.
1 | Switch# configure terminal |
The server IP (for UNIX systems) to be logged after switching to Config mode is specified with the command below.
1 | Switch(config)# logging host 192.168.1.10 |
After entering the command and pressing Enter, we will see a message as below. It is stated that logging has started on the IP address specified on the 514 port.
1 | *Ara 05, 17:35:29.3535: SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 192.168.1.10 port 514 started - CLI initiated |
In the next step, we need to determine the Logging level. If the configuration is not done here, Logging Level will be informational (Severity = 6) by default.
Logging trap command is written and “?” When we put the sign, the logging levels that can be entered to us will be listed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 | Switch(config)# logging trap ? <0-7> Logging severity level alerts Immediate action needed ( severity=1 ) critical Critical conditions ( severity=2 ) debugging Debugging messages ( severity=7 ) emergencies System is unusable ( severity=0 ) errors Error conditions ( severity=3 ) informational Informational messages ( severity=6 ) notifications Normal but significant conditions ( severity=5 ) warnings Warning conditions ( severity=4 ) <cr> |
Here we choose debugging (severity = 7).
1 | Switch(config)# logging trap debugging |
We save the configuration we made by entering the command do wr.
1 2 3 4 5 | Switch(config) #do wr Building configuration... [OK] |
Switch to privileged mode again with the end command.
1 | Switch(config)#end |
A general summary of the configurations made with the show logging command will appear as follows.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 | Switch#show logging Trap logging: level debugging, 11 message lines logged Logging to 192.168.1.10 (udp port 514, audit disabled authentication disabled, encryption disabled, link up), 11 message lines logged, 0 message lines rate-limited, 0 message lines dropped-by-MD, xml disabled, sequence number disabled filtering disabled |
Finally, we save the config file to the startup-config file so that the running configurations are not lost when the Switch is closed.
1 | Switch# copy running-config startup-config |
After these settings are completed, the Data Input> Device List is selected from the Settings menu on the Logsign side and click on Add New Source button in the window that appears.
Syslog option is clicked because it will send Cisco Switch logs with Syslog.
Cisco> Switch Plug-in is selected from the list.
After entering the necessary information, we have added our router device as Syslog.
I hope it was a useful article.