我刚刚安装了 Kiwi Syslog Server,并且正在尝试从我的 Cisco 2960 交换机中捕获 Syslog 消息。根据在线文档,我创建了以下配置:
logging 192.168.1.5
logging trap 7
logging facility local7
service timestamps debug datetime localtime msec year
service sequence-numbers
archive
log config
logging enable
logging size 1000
exit
exit
clock timezone IST +5 30
logging source-interface vlan 1
现在我没有看到所有发送到服务器的日志。这是显示日志记录的结果:
G01#sh logging
Syslog logging: enabled (0 messages dropped, 0 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)
No Active Message Discriminator.
No Inactive Message Discriminator.
Console logging: level debugging, 1228 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level debugging, 1228 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
File logging: disabled
Persistent logging: disabled
No active filter modules.
Trap logging: level debugging, 1232 message lines logged
Logging to 192.168.1.5 (udp port 514, audit disabled,
authentication disabled, encryption disabled, link up),
14 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Log Buffer (4096 bytes):
有人能告诉我为什么即使陷阱记录了 1232 条消息行,也只有 14 条被发送到服务器本身吗?
我的主要目标是确保任何接口启动/关闭、任何类型的调试信息、任何类型的配置更改都被记录并发送到 Syslog 服务器。
请指教,
谢谢。