How to Install Cisco Switch Integration (Syslog)?

We will see how to do the Cisco Switch Integration (Syslog). For this, we will do the installation by following the steps below.

The enable command switches from user mod to privileged mod.

Switch>enable

Global configuration mode is passed with the configure terminal command.

Switch# configure terminal

The server IP (for UNIX systems) to be logged after switching to Config mode is specified with the command below.

Switch(config)# logging host  192.168.1.10

After entering the command and pressing Enter, we will see a message as below. It is stated that logging has started on the IP address specified on the 514 port.

*Ara 05, 17:35:29.3535: SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 192.168.1.10 port 514 started - CLI initiated

In the next step, we need to determine the Logging level. If the configuration is not done here, Logging Level will be informational (Severity = 6) by default.

Logging trap command is written and “?” When we put the sign, the logging levels that can be entered to us will be listed below.

Switch(config)# logging trap ?
 

<0-7>                  Logging severity level

alerts                 Immediate action needed                      ( severity=1 )

critical               Critical conditions                          ( severity=2 )

debugging              Debugging messages                           ( severity=7 )

emergencies            System is unusable                           ( severity=0 )

errors                 Error conditions                             ( severity=3 )

informational          Informational messages                       ( severity=6 )

notifications          Normal but significant conditions            ( severity=5 )

warnings               Warning conditions                           ( severity=4 )

<cr>

Here we choose debugging (severity = 7).

Switch(config)# logging trap debugging

We save the configuration we made by entering the command do wr.

Switch(config) #do wr

Building configuration...

[OK]

Switch to privileged mode again with the end command.

Switch(config)#end

A general summary of the configurations made with the show logging command will appear as follows.

Switch#show logging

     Trap logging: level debugging, 11 message lines logged
            Logging to 192.168.1.10  (udp port 514,  audit disabled
            authentication disabled, encryption disabled, link up),

             11 message lines logged,

             0 message lines rate-limited,

             0 message lines dropped-by-MD,

             xml disabled, sequence number disabled

             filtering disabled

Finally, we save the config file to the startup-config file so that the running configurations are not lost when the Switch is closed.

Switch# copy running-config startup-config

After these settings are completed, the Data Input> Device List is selected from the Settings menu on the Logsign side and click on Add New Source button in the window that appears.

Syslog option is clicked because it will send Cisco Switch logs with Syslog.

Cisco> Switch Plug-in is selected from the list.

After entering the necessary information, we have added our router device as Syslog.

I hope it was a useful article.