cisco logging

First thing is to setup a syslog server. Google Kiwi Syslog for Windows systems, in *NIX it has its own syslog server. Also what equipment is this?

Once you have the Syslog installed and running login to the device and enter:

# logging on # logging trap 7 (this will log all events on the device) # logging x.x.x.x (where x.x.x.x is the IP of the syslog server) # write memory

Once you do this all log messages will be sent to the server and stored into a logfile for later review.

Thanks for the quick reply. The reason why I didn't go the syslog way is because I want the ability to troubleshoot these acces lists on the "fly". I don't want to have to setup a syslog every time I need to troubleshoot a remote router. I would like to be able to vew the stored logs to better understand and see what's I've missed. Regarding the syslog, is there a way or a number that would only log these "%SEC-6-IPACCESSLOGP"

Thanks again.

This particular router is a 1721.

Hi,

If you setup a syslog server and then setup logging on all your devices you'll never have to configure logging again. The most you'll have to do is change the logging levels (although I tend to log everything and purge old logs so I dont even ened to do that). You can do on-the-fly logging via a *nix system by using the "tail -f" command.

Cheers Scotty C

thanks. How about just viewing what the cisco router has stored?

Console logging: level debugging, 121 messages logged Monitor logging: level debugging, 19 messages logged

If you're just parsing for deny messages "on the fly", you can use

#>show log | include deny

that will parse the log and just spit you out the deny statements.

You'll also want to increase your logging buffer if you don't want to use a syslog server; typically its quite small to begin with and depending on activity the log will scroll too fast.

(config)#>logging buffer 20000 (for example)