Troubleshooting Guide

Variable Value
tcp-port <1025–49151> Set tcp-port for secure forwarding of syslog for host. The default
tcp-port is 1025.
To set the TCP port to default value, use command default
syslog host <1–10> secure-forwarding tcp-port.
Important:
The tcp-port 6000 cannot be used, as it is used as an internal
port for Internal Spanning Tree (IST).
Installing root certificate for syslog client
Use the following procedure to install a root certificate for a syslog client.
Procedure
1. Enter Global Configuration mode:
enable
configure terminal
2. Install a root certificate on the store:
syslog root-cert install-filename <file-name>
The certificate is installed in folder: /intflash/.cert/.syslogrootinstalledcert/.
Note:
The offline root certificate for TLS syslog must be kept in folder: /
intflash/.cert/..syslogofflinerootcert/.
3. Uninstall a root certificate from the store:
no syslog root-cert install-filename <file-name>
4. To display the installed syslog server root certificate file:
show syslog root-cert-file
Variable definition
Use the data in the following table to use the syslog root-cert command.
Variable
Value
install-filename WORD<1–
128>
Specifies the name of the root certificate to be installed on the store.
Log configuration using ACLI
January 2017 Troubleshooting 52
Comments on this document? [e-mail]