Installation guide

4-16
Device Manager Guide, Cisco ACE 4700 Series Application Control Engine Appliance
OL-26645-02
Chapter 4 Configuring Virtual Contexts
Configuring Virtual Context Syslog Logging
• Configuring Syslog Log Hosts, page 4-16
• Configuring Syslog Log Messages, page 4-17
• Configuring Syslog Log Rate Limits, page 4-18
Configuring Syslog Log Hosts
After configuring basic syslog characteristics (see the “Configuring Virtual Context Syslog Logging”
section on page 4-12), you can configure the log host, log messages, and log rate limits. The tabs for
these attributes appear beneath the Syslog configuration screen.
Guidelines and Restrictions
You can configure the ACE with a maximum of four log hosts per context.
Procedure
Step 1 Choose Config > Virtual Contexts > context > System > Syslog.
The Syslog configuration screen appears.
Step 2 Select the Log Host tab.
The Log Host table appears.
Step 3 Click Add to add a new log host, or select an existing log host, and then click Edit to modify it.
The Log Host configuration screen appears.
Step 4 In the IP Address field, enter the IPv4 address of the host to be used as the syslog server.
Step 5 In the Protocol field, select TCP or UDP as the protocol to be used.
Step 6 In the Protocol Port field, enter the number of the port that the syslog server listens to for syslog
messages.
Valid entries are from 1 to 65535. The default port for TCP is 1470 and for UDP it is 514.
Step 7 If it is present, check the Default UDP check box to specify that the ACE appliance is to default to UDP
if the TCP transport fails to communicate with the syslog server.
The Default UDP check box appears if TCP is selected in the Protocol field (Step 5). Clear this check
box to prevent the ACE appliance from defaulting to UDP if the TCP transport fails.
Step 8 In the Format field, indicate whether EMBLEM-format logging is to be used as follows:
• N/A—Indicates that you do not want to enable EMBLEM-format logging.
• Emblem—Indicates that EMBLEM-format logging is to be enabled for each syslog server. If you
use Cisco Resource Manager Essentials (RME) software to collect and process syslog messages on
your network, enable EMBLEM-format logging so that RME can handle them. Similarly, UDP
needs to be enabled because the Cisco Resource Manager Essentials (RME) syslog analyzer
supports only UDP syslog messages.
Step 9 Do one of the following:
• Click Deploy Now to deploy this configuration on the ACE appliance.
• Click Cancel to exit the procedure without saving your entries and to return to the Log Host table.
• Click Add Another to configure another syslog host.