Questions tagged [logging]
For questions about logging in relation to network devices. For instance, you are configuring logging on your switch or you are troubleshooting a log issue on a router.
51 questions
1 vote
2 answers
2k views
Forward log events to syslog through Fortianalyzer
I'm trying to send my logs from fortianalyzer to graylog, i've set up logforwarding to syslog and i can see some logs that look like this on graylog <190>logver=702071577 timestamp=1714736929 ...
0 votes
1 answer
4k views
Reset and Login Issues with C9500-48Y4C Switch
I have a Cisco C9500-48Y4C Switch, but I forgot the login credentials while configuring it, which has resulted in me being unable to access the Switch. Could you please guide me on how to reset this ...
2 votes
1 answer
465 views
Does Cisco ASA support encrypted logging
Background I am approaching this from a SIEM or Log Collection point of view. Our corporation is thinking about making encrypted logging mandatory Question Cisco ASA default appears to me to be send ...
0 votes
2 answers
164 views
How does leaving a TCP connection half-open makes SYN and SYN+ACK stealth and absent from the logs?
I was studying about TCP SYN (stealth) scan which involves carrying out port scan while avoiding detection. I also read that it is similar to TCP connect scan except that the last ACK packet is ...
0 votes
1 answer
162 views
logging host 1.1.1.1 on Cisco C9300
My Catalyst C9300s running IOS-XE have logging host 1.1.1.1 in the config by default. Is that because it is sending logs to it's internal logs store? I can't seem to find a straight answer in the ...
0 votes
2 answers
355 views
Can we have two logging source-interface configured on Cisco Switch?
I would like to understand if its possible for us to have two logging source-interface configured on Cisco Switch: logging source-interface vlan1 (For syslogs) logging source-interface vlan2 (For ...
0 votes
1 answer
887 views
configure logging of access successful & failures locally on ASA
Is it possible to configure log-in/access logging (success & fail) locally on ASA? If it's possible how? If it's not then should I use asdm or TACACS?
1 vote
1 answer
2k views
How do you redirect Fortigate packet sniffer CLI output to a log file?
I want to run the fortigate packet sniffer: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Using-the-FortiOS-built-in-packet-sniffer/ta-p/194222 and when I do so, I only get CLI ...
1 vote
1 answer
75 views
Lower level syslogs not sending
We have an MPLS router (ISR4351) in our main data center that reboot itself, causing it and connections to ISR's at other sites to go down. We export our syslogs to a server, and for some reason, none ...
3 votes
1 answer
1k views
How do I check if a Cisco switch is connected to a SYSLOG server?
We use the Cisco C2960X switch. Query 1: What does console, monitor, buffer & exception logging mean? Query 2: Capture logging to 192.168.X.X which means if the switch sends logs to the SYSLOG ...
1 vote
1 answer
2k views
Logging discriminator to omit specific log message in Cisco
I'm trying to omit a specific log from being sent to our NMS. We are already using a discriminator to limit the severity of messages to include 5,4,3,2,1,0. I'd also like to add to this so that it ...
1 vote
1 answer
144 views
OSPFv3 Authentication IPSEC SPI/Logging issues - Can you filter out logs?
I'm running into a problem with our Cisco ASR-1002HX and ASR-1006X. I have a mix of Juniper and Cisco routers all configured exclusively with IPv6. All of our routers are in the same ospfv3 area 0. We ...
3 votes
1 answer
323 views
Log messages not leaving switch after changing source to management port
I reconfigured some of our switches to add an OOB connection from the management port. The below configuration is from a 4500X, but also seeing this on 3850s and 2960s. After I did this I updated the ...
1 vote
0 answers
226 views
Meraki and Syslog-NG OSE [closed]
I've been struggling epically to export legible logs from my Meraki devices to a server running Syslog-NG OSE 3.30. No matter what source driver I use on the server, I see errors like this (...
1 vote
1 answer
130 views
Where can one find how much memory is currently allocated to logbuffer?
Do you know where it can be checked, how much memory is currently being used by the logbuffer? some-switch#show log | i Buffer|Trap|udp Buffer logging: level debugging, 2268 messages logged, xml ...