GP, You can dump all Cisco logs to local7.* and then have a parser check that file from time to time. It doesn't necessarily mean that you allocate one local[n] for each device.
Local7.* /var/log/cisco_log Or Local.info /var/log/cisco/cisco_info.log Local.alert /var/log/cisco/cisco_alert.log /Francis -----Original Message----- From: gp [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 21, 2002 7:28 AM To: [EMAIL PROTECTED] Subject: Re: [plug] OUT GROWN SYSLOG Ian, Thanks for sharing. glen "Ian C. Sison" wrote: > I use syslog-ng. Its very configurable, with regexp filters for program > or even the actual log contents. It can do remote reception of logging, > and you can configure one file per interface via the filtering options. > > look for it at freshmeat.net > > On Tue, 19 Nov 2002, gp wrote: > > > I have used the syslog daemon in Linux intensively in our network that I > > have run out of logging facility. I have entries on our servers and > > cisco routers wherein they log all the activities to a central logging > > server(hardened I hoped) but the thing is it works well that I want all > > our Cisco including our Aironet 350s to logging to that server. There is > > the that says in the Cisco router logging facility local2,logging trap > > informational, logging 10.10.10.1. The thing is I have only local1 to > > local7 limiting me to only 7 devices that can use the logging server. Is > > there any way I can increase this or there a Linux program that I can > > use instead of the the syslog daemon that can securely accept several > > logs from other Linux servers and Cisco routers. Thanks for your > > valuable advice. > > > > > > _ > Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph > To leave: send "unsubscribe" in the body to [EMAIL PROTECTED] > > Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph > > To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED] _ Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph To leave: send "unsubscribe" in the body to [EMAIL PROTECTED] Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED] _ Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph To leave: send "unsubscribe" in the body to [EMAIL PROTECTED] Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED]
