Technical data

Using Syslog Messaging to Monitor Router Events
303561-A Rev 00
C-13
See “Configuring Syslog on the Router” on page C-15 for instructions on how to
enable the Syslog time sequencing feature.
Configuring Syslogd on a UNIX Workstation
Before you configure and activate Syslog on any routers, configure Syslogd on
UNIX network management workstations in your network. This helps to prevent
the loss of event messages you may want to capture as you begin to enable Syslog
on each router.
UNIX workstations have a syslog.conf file in which you define destinations for
event messages received by the local Syslogd software module. For Syslogd to
properly dispatch router event messages to a file, display, printer, and/or another
remote host, you must edit the contents of the /etc/syslog.conf file.
Configure Syslogd on your UNIX workstation, as follows:
1.
Log in as superuser, as follows:
su root
2.
Open
/etc/syslog.conf
and examine the
<facility.level>
indicators,
local
<0 - 7>
.
<fault
|
warning
|
info
|
trace
|
debug>
.
3.
Edit
/etc/syslog.conf
as needed to achieve message handling appropriate
for your management workstation requirements.
See the examples on page C-14
.
4.
Save the changes you made to
syslog.conf
.
5.
Enter the UNIX
ps
command to obtain the process ID for the Syslogd
process currently running on the workstation.
6.
Reinitialize Syslogd by entering the following command at the UNIX
command line prompt:
kill -HUP
<process_id>
Note:
Enable time sequencing only when it is important for your management
workstation to receive router event messages in timestamped order, rather than
in order of retrieval from each slot. (When you enable the time-sequencing
feature, Syslog requires more processing resources from the router.)