So in my network, I'll have my Syslog server connected to router 1 which in turn is connected
to router 2. My Syslog server has an IP address of 192.168.1.254
and it can ping the loopbacks of both routers.
Kiwi Syslog is running on the Windows PC
over here.
So now let's configure logging messages on the router, so I'm gonna say logging
and I need to specify an IP address if I want to log to that server, so 192.168.
1.108
that is once again
the IP address of this PC
and then I'm going to say logging trap
7.
Now, before I enable logging on router 2
let's have a look at logging. So show log
we can see that trap logging is set to debugging and I'm logging to this server, according to the router 2
messages have already been logged to the syslog server and I can actually see that here in my Kiwi
syslog server.
So something was configured via the console and logging has been enabled.
So it's nice now is I could actually do something simple, like just pressing control Z or control Zed and
notice I can see the output on the syslog server.
Now, I'm not seeing anything on my console because my console at the moment is set to level errors,
so let's change that.
So logging console 7 or debugging,
I'll see the output here
and I also see it on my syslog server.
Now, one of the things that you'll notice is that the date and time stamps are not correct.
If I type show clock, you can see that the clock is set to March 2002.
So let's set the clock
to the current time at the moment here in the UK
and the 16th of May 2016 at the moment, so show clock notice, please, that on my Syslog server,
it changed from March to May.
So that update is being done, you can also see in this case that there are some OSPF messages because
I am running
a debug adjacencies on the router, so my timestamps have been enabled properly.
If I type show run pipes include log,
notice service, time stamps, log date time milliseconds allows me to specify that timestamps will
be included in logging messages.
That's a very important command to add to your router so that you actually get the date and timestamps
on your log messages
otherwise you would know when things took place.
So before I explain some of the options, let's do a test or shut the interface down on router 2
and then, no, shut it and what you should see now is I get logging messages on my console
but I'm also getting those logging messages on my Syslog server. So I'm seeing all the logging
messages not only on the console, but I'm seeing it on my Syslog server.
So this is a better way of storing log messages.
There are other options available and you can have a look at the online help for more details.
I simply wanted to show you here how to get a Syslog system running and integrated between a Cisco router
running in GNS3 and the Solarwind Syslog server.