Syslog.conf and cisco router (logging trap)

[benoit Bruckert]

Hi,
I would like to know which configuration to use to send some logs from a cisco router (I.E. the logging trap level...) to get the logs from access-list definition. And how to configure syslogd on the HP-UX server to send these logs in a specific file....
I can get these logs in the syslog.log file, but I would like to store them in a specific file .
Someone already did it ?

[Clemens van Everdingen]

Hi,

See this thread and several others:
searched with syslog.conf

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xe802237a4bc6d611abdb0090277a778c,00.html

C.

[U.SivaKumar_2]

Hi,
A basic setup is like this
In cisco router, give this command
logging xx.xx.xx.xx

where xx.xx.xx.xx is the IP address of the HP-UX server. syslogd will listening for messages
in HP-UX by default. udp port 514.

Now your cisco messages will be logged to
/var/adm/syslog/syslog.log file.

For a setup for logging in to a separate file
put this line as first line in /etc/syslogd.conf

local7.* /var/adm/syslog/cisco.log

As cisco devices send local7 syslog messages by default.
Now as root
#touch /var/adm/syslog/cisco.log

and restart syslogd daemon by giving kill -1
or by
#syslogd -r

regards,
U.SivaKumar

[benoit Bruckert]

Thanks for your quick answer..
I found by my way that the logging facility command on cisco can change the default , and I can specify local3 or something else (local7 was already used !!).
I have just now to find the level of message from the access-list log command (warning, information, alert ???) . But it will be easy by now to do it !!!
regards
Benoit