1. Setup your Cisco devices to send Cisco log to your syslog server
logging 1.2.3.4 ! where 1.2.3.4 is your Cisco log server
logging trap debug
logging on
2. Make sure rsyslog daemon is installed on your host. I'm using rsyslog-2.0.2-3.fc8.
3. Tell the syslog daemon to listen for messages from remote devices
vi /etc/sysconfig/rsyslog
SYSLOGD_OPTIONS="-m0 -r"
4. Tell the rsyslog daemon to write the messages to cisco.log
vi /etc/rsyslog.conf
local7.debug /var/log/cisco.log
Great, it really helps!!!
ReplyDelete