CGNAT: ¿ syslog reporting of CGNAT sessions?

Hello team.
I would like to know if besides the comprehensive Netflow support for session accounting, there also is (or is not) chance to configure basic SYSLOG reporting when NAT sessions area created/deleted.
Thank you very much in advance
Best regards, Rogelio Alvez

Hi Rogelio,
starting from 4.2.1, the syslog is also supported as a logging mechanism for Nat44 and DS Lite on both ISM and CGSE.
You can also configure Bulk Port Allocation to reduce the number of reports generated.
Cheers,
N.

Similar Messages

Daily report for user sessions in oracle10g database

I would like to genarate the daily report for user sessions in oracle10g database
daily report of how many of sessions present in oracle database for each user

Thanks for link ( I know you always post the oracle document link here)
But I am expecting scripts( someting like logon trigger and logg off trigger) to genarate the user session report.

LMS 3.2 SP1 - Syslog Report times out / CW14: NO HTTP response

Hi,
in Device Center I can´t start the Syslog Report, it opens a new Browser window and times out.
If I start the "Device Troubleshooting" from the Device Center, all checks are successful. Just the check "Syslog Message" show the error: CW14: NO HTTP response from Servername
I have LMS 3.2 SP 1 installed
I already re set the System Identity User and restarted the daemon, no success.
What should I check? Is it a known problem ?
Best regards,
Patrick
UP

Hey,
i maybe found the failure.
In the dir "CSCOpx\databases\rmeng" the following files are very big.
So I started a immediate syslog purge job, but it failed.
[ Thu Jul 28 09:00:33 CEST 2011 ],INFO ,[main],Starting purge job 5349
[ Thu Jul 28 09:00:33 CEST 2011 ],INFO ,[main], Its a force Purge job
[ Thu Jul 28 09:02:21 CEST 2011 ],ERROR,[main],Drop table failed:SQL Anywhere Error -210: User 'DBA' has the row in 'SYSLOG_20110627' locked 8405 42W18
[ Thu Jul 28 09:02:21 CEST 2011 ],ERROR,[main],Failed to purge syslogs
[ Thu Jul 28 09:02:22 CEST 2011 ],ERROR,[main],Purge not successful
Can anyone say me, how to fix it?
Best regards
Patrick

Core switches experience High CPU while generating syslog report from LMS

Hi Everyone,
Are there anyone who experience that the CPU utilization of some devices went up while generating a report from RME. Basing from other monitoring tool SNMP is taking up a huge cpu process. Any idea why this happened considering that the report is generated daily but only on one instance it caused the core switches to be paralyze due to high cpu. Changing the SNMP community string is the immediate action that resolve the issue to disconnect it from LMS.
BTW, this is LMS 2.6.
Thank you.

The problem did not reoccurred any more. When I checked on the Syslogcollector.log it appeared that it is unable to subscribe. I assumed that the reason why snmp packets were flooded during the time that it they experience high cpu is because the client is generating syslog report for all devices while the syslog collector is not subscribe. Is this possible?
Thanks

How to edit a scheduled Syslog Report job in RME 4.03

Hi
I am using Cisco Works LMS 2.5, with RME 4.03
There are 4 scheduled syslog report jobs that are set to run. We had a problem with syslog that meant that these reports returned zero records.
Syslog and manual reports now work fine, but I need to edit or delete and re-create the scheduled jobs as the problem still exists with these. I'm thinking that perhaps the required devices are not selected (I had to re-build RME db from scratch recently also)
But I cannot find them anywhere!
All I can find in RME Jobs page is the instance of the job.
How do I edit the main job?
Help much appreciated
Thanks!
Phil

The answer was provided by TAC.
It's not possible to edit jobs. the ones you see in RME Jobs are the instances of the jobs.
The only way to delete these jobs is via the CLI:
+ Stop daemons :
Net stop crmdmgtd “wait till its down”
+ cd to C:\progra~1\CSCOpx\databases\rmeng>
+ Issue the command :
dbvalid -c "uid=dba;pwd=;dbf=rmeng.db"
example :
C:\Program Files\CSCOpx\databases\rmeng>dbvalid -c "uid=dba;pwd=c2kY2k;dbf=rmeng.db"
please send me the results
please note that my RME db password is the default à c2kY2k you have to use the correct RME pwd .
+ Start daemons manager : net start crmdmgtd “wait till it starts ”
One for the library :)
Thanks for your responses tho. cheers!

How to set report output to session variable

Hi,
Is there any way to set report output to session variable . If my report returns 1 row and 1 column.
I have a dashboard prompt where i am selecting Name , but i want to find out the ID of that name .
that ID i want to pass to a column Fx , to achieve this i created a intermediate report and i got the ID. Now my problem is how do i set this ID in session variable .
Please help if anyone knows...

Did you read this:
how to set session / presentation variable in repository variable
Dashboard prompt on Month Name but report filter on month ID:
Re: Dashboard prompt on Month Name but report filter on month ID needed
If you have dashboard prompt (name) then you may have only one report that is filtered by name but show id or not show id but use id in the function. Or two reports like in the solution in the second link above and the second report has id in the function and filter by id from the first report. You don't need to set this ID in session variable for this example.
Please close your previous threads if they are answered.
Regards
Goran
http://108obiee.blogspot.com

LMS3.2 Syslog reports very slow when send via email

Hello,
we have ~5000 devices in LMS3.2 and we have a problem with syslog reports.
When I create a "severity level summary report" for 5000 devices for the last 24hours and select as run type "immediate" it needs ~2-3 minutes. That's ok.
But when I create exactly the same report and select the run type "once" , it needs ~3 hours. ("Once" means that the report is send via email after it's finished). It happens with report type "pdf" and "csv".
What can be the problem ? Or is it usual ???
Regards
Hendrik

The scheduled reports can output a full list of messages where as the immediate reports output a limit of 10,000 records. If you have a lot of syslog messages, it can take a considerable amount of additional time to generate a full report.

Creating syslog report on a separate server for ASA 5555-x

hello all,
how do we create syslog report for ASA to dump in a separate physical server?
thanks

Hello,
You mean send syslog messages to an external dabatase
If thats the case it should be
logging enable
logging server name_if IP_address
logging trap 7
For more information about Core and Security Networking follow my website at http://laguiadelnetworking.com
Any question contact me at [email protected]
Cheers,
Julio Carvajal Segura

No syslog message appear at Ciscoworks syslog report

Hi,
We just installed new Ciscoworks LMS 3.2, and sent all switches syslog message to this Ciscoworks LMS 3.2 and old Ciscoworks LMS 2.5 server.
Old Ciscowork LMS 2.5 server can receive syslog message and syslog appear at old LMS 2.5 syslog report, but no syslog appear at new LMS 3.2 syslog report for some devices. I checked syslog collector, it seems ok, I used WireShark to check the new Ciscoworks LMS 3.2 server have received syslog message sent from device, and only use default syslog filter at new Ciscoworks LMS 3.2 server.
Please help to advice me how to troubleshooting this problem.
Best Regards,
Jackson Ku

Is your collector subscribed? You could verify this under RME -> Tools -> Syslog -> Syslog Collector Status. Please post the screen shoot of this page.
Do you see the syslog messages in syslog.log/syslog_info file on the server?

CiscoPrime LMS 4.1 Syslog Report Empty

I have a new install of LMS 4.1 on a Windows server I'm trying out. I have switches and firewalls syslogging to the system, but when I run any kind of Syslog report (Reports > Fault and Event > Syslog) it's always blank. I ran a Wireshark capture on the server and it's definitely receiving a ton of syslog data from the systems. What am I missing here? :-)

perhaps this is of some help for anybody....
I just troublshoot a LMS 4.2.1 installation on windows where the syslog report did not show any syslog message ("no data available") nor did any syslog report had any data.
SyslogCollector and SyslogAnalyzer where running fine and the server itself was successfully subscribed to the SyslogCollector (Admin > Collection Settings > Syslog > Syslog Collector Status). What was really suprising was the fact, that the counter for "Forwarded" messages was rising when syslogs arrived in the syslog.log file.
In the end it turns out, that this was a fresh installation of LMS 4.2 (updated to LMS 4.2.1) and the effort to restore the database from the old LMS 3.2.1 system failed. To get the minimum data form the old LMS system, only the devices were exported form the old system and imported into the new system - a discovery was never done.
In the AnalyzerDebug.log I found that while the system was trying to insert the messages into the syslog db the process fails because it could not associate a DcrId to the IP which was sending the syslog message.
Also DNS was running in round-robin mode in the network. I finially added the devices to the hosts file, did run a discovery and the syslog messages started to show up in the report.
to see the relevant messages in the AnalyzerDebug.log, debugging for SyslogAnalyzer must be turned on.
these are the troubleshooting steps and this is what I saw in the AnalyzerDebug.log:
=======================================
enable debugging
Admin > System > Debug Settings > Config and Image Management Debugging Settings
Set Application Logging Levels >> SyslogAnalyzer (scroll down)
set Syslog Analyzer and Syslog Analyzer User Interface from INFO to DEBUG
(do not foret to reset debugging when finished!)
NMSROOT\log\AnalyzerDebug.log
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],com.cisco.nm.rmeng.util.DCRWrapperAPIs,getResultFromQuery,4008,Counter : 17
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],com.cisco.nm.rmeng.inventory.InvAPIs,getDeviceIdsFromIPAddresses,3038,For IP Address: 192.168.x.x Device id is:null
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Device id not found even in the inventory
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Found the device id as null
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Attempting to insert the syslog into database
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Preparing to hand of syslog to the database handler
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Syslog length=1
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3], Time stamp of the syslog received is : Fri Aug 10 14:34:02 CEST 2012 GMT 10 Aug 2012 12:34:02 GMT
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Inside execute mothod
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Insert into SYSLOG_20120710(Syslog_Device_Id,Syslog_Device_Name,Syslog_TimeStamp,Syslog_Facility,Syslog_SubFacility,Syslog_Severity, Syslog_Mnemonic,Syslog_Description )values(?,?,?,?,?,?,?,?)
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Inside Retry count
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Connection is now false
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Recreated the statement object
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Row count 1
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Added syslog to the database handler
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Insertion of syslog into database is done
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Attempting to find interested actions, bypassing
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Syslog is found to be unexpected. No actions will be taken, returing
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Preparing to get collector status
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Current no. of collectors is 1
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Processing for the subscription LMSServerNmeLMSServerName
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],getCollector =192.168.y.y
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Port4444
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Connected to the collector 192.168.y.y@4444
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Gathered status from collector
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Captured the status from the collector
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Done with the status collection
==================================================

RME cannot generate a syslog report.

Hi,
I have an issue with rme 4.2 from LMS 3.1
When I try to generate a syslog report this shows me nothing. I locate SyslogCollector.log file and I see sometnig wrong.
SyslogCollector - [Thread: Thread-9] WARN , 28 Apr 2011 14:45:10,400, Unable to add monitor for cwkstmm2009
SyslogCollector - [Thread: main] INFO , 09 May 2011 16:12:35,510, Logging System Initialized.
SyslogCollector - [Thread: main] INFO , 09 May 2011 16:12:35,519, System Initialized.
SyslogCollector - [Thread: main] WARN , 09 May 2011 16:12:40,948, Unable to resurrect connection to a subscriber.
SyslogCollector - [Thread: main] INFO , 09 May 2011 16:12:41,027, Service started...
SyslogCollector - [Thread: Thread-10] WARN , 09 May 2011 16:12:44,024, Unable to add monitor for cwkstmm2009
SyslogCollector - [Thread: main] INFO , 17 May 2011 11:08:17,360, Logging System Initialized.
SyslogCollector - [Thread: main] INFO , 17 May 2011 11:08:17,364, System Initialized.
SyslogCollector - [Thread: main] WARN , 17 May 2011 11:08:23,433, Unable to get the filters for subscriber cwkstmm2009. Default value will be used.
I modified Syslog.properties file to see DEBUG and this it the output
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,152, SCCleaner - About to fire close() on collector engine...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,153, SyslogCollectorEngine - Closing evaluators...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,153, FcssEvaluator - Closing LogReader...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,153, FcssEvaluator - Closing EmblemProcessor...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,154, FcssEvaluator - Releasing SyslogQueue...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,164, FcssEvaluator - Closed successfully...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,165, SyslogCollectorEngine - Closing filters...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,165, FcssFilter - Closing FilterProcessor Threads...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,165, FcssFilter - Closing Filter Store...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,166, FcssFilter - Closed successfully...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,166, SyslogCollectorEngine - Closing forwarders...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,166, FcssForwarder - Closing Forwarders...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,166, FcssForwarder - Releasing resources...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,167, FcssForwarder - Closed successfully.
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,167, SyslogCollectorEngine - Closing monitor...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,167, SyslogCollectorEngine - Closing monitor task...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,168, SyslogCollectorEngine - Closing recovery assistant...
SyslogCollector - [Thread: Thread-3] DEBUG, 17 May 2011 11:41:54,168, SyslogCollectorEngine - Closed successfully.
SyslogCollector - [Thread: main] INFO , 17 May 2011 11:42:05,837, Logging System Initialized.
SyslogCollector - [Thread: main] INFO , 17 May 2011 11:42:05,840, System Initialized.
SyslogCollector - [Thread: main] INFO , 17 May 2011 11:42:06,275, Subscriber list is empty!
SyslogCollector - [Thread: main] INFO , 17 May 2011 11:42:10,863, Service started...
I post the Syslog Collector Status image where it shows NOT REACHABLE.
Can you help me, please.

Hi,
I have tha same problem while subscribing. it gives me the error "could not subscribe to the collector"
Actually I want to generate Syslog and SNMP traps with Cisco lms 3.0
please help me about the error and am i configuring the right thing for my goal ? !!!!!
Rizwan Haider Siddiqui.......
[email protected]
+92-33-44-2222-39

Bw web report plugin http session hangs at the server side

Hi,
I am having problems when closing the browser of a BW web report. After I closed the browser by going File->close, I ran SM04 and found out the Plugin HTTP session hangs at the server side.
How can we terminate the Plugin HTTP session at the server side when user closes the internet browser?
I did implement a logoff function at my web template, if user clicks on the logoff, the Plugin HTTP session is terminated at server side correctly. But As you know, 50% of time user will close the report by closing the internet browser instead of clicking the logoff. That leaves lots of hanging Plugin HTTP sessions at our server side.
By the way, we actived our BEX service at the SICF.
Thanks for help!
JA

Hi
If you want to avoid a blank page with logoff button, add opener=0
<a href="<SAP_BW_URL CMD='LOG_OFF' ~command='logoff'
>" onClick="javascript:window.close(opener=0);">Log off</a>
If you want to close the session via X, use this code:
create a sapscript function
function closeSession()
logoff()
window.unload=CloseSession()
However, the Plugin HTTP session isn't killed.
Regards

Interactive Report Download and Session State Protection

I have created an Interactive Report in an APEX application that I have enabled
session state protection for. The issue I am having is with the "Download"
functionality of the interactive report to a .csv file.
The URL created by selecting Download from the drop down (javascript:gReport.controls.download();)
is built or constructed without a checksum thus causing the error below.
Error
No checksum was provided to show processing for a page that
requires a checksum when one or more request, clear cache, or argument
values are passed as parameters.
The anchor tag containing the URL (/f?p=app_id:page:session_id:CSV:) is contained within
<div id="apexir_CONTROL_PANEL_DROP" class="drop_panel
clearfix" style="">
Running the following: Application Express 3.1.0.00.32 on Oracle Database 10g Enterprise Edition Release 10.2.0.3.0
Is there a way to add a checksum to this? OR does anyone have any ideas on how to work around this?
Edited by: Bryce Tuohy on Feb 26, 2009 10:08 AM

WORKAROUND:
1.) Create hidden ITEM on page (I named it P23_PREPARED_CSV_DOWNLOAD_URL).
Enter the following for the ITEM
as the SOURCE_TYPE : PL/SQL Function Body
as the SOURCE: return apex_util.prepare_url('f?p=&APP_ID.:&APP_PAGE_ID.:&APP_SESSION.:CSV:')
2.) Create BUTTON that executes javascript to open POPUP window with this url.
a.) Create Button and enter
<a href="javascript:popupURL('&P23_PREPARED_CSV_DOWNLOAD_URL.')">Download and Save to CSV file</a>as the "Text Label/Alt"
Originally had custom code for javascript POPUP and this is not needed .... just use the APEX javascript function.
Edited by: Bryce Tuohy on Mar 5, 2009 10:47 AM

LMS 3.2 SP1 RME showing no records in syslog report while same report in device center shows

Hi All,
I have LMS 3.2 SP1 running on windows machine, when i am generating 24 hours report(Standard) in RME i do not see any records, while in Device center in Device Diagnostic center, i can see the same report showing the logs. i have checked the sylog.log file, i can see the logs in it. I have restored the original database by Restoredborig.pl, the RME database also but no result.
I would appreciate quick reply in this matter as i am facing this issue since long time and tried all possible things.
Regards,
Chander

Hi Chander,
Share the screen shot to Syslog Collector status.
Thanks-
Afroz

LMS 3.2 SP1 RME showing no records in syslog report while shows same report in device center

Hi All,
I have LMS 3.2 SP1 installed on windows 2003 server with 2 GB of RAM, its doubled swap space and with 230 GB of partition assigned to it.
when i am generating Syslog 24 hour report in RdME , it does not show any data. I have checked with syslog.log file which is perfect. Even, i have recreated this file. I have checked with syslog collector and analyzer which is also fine. I have also restored the database to factory default by RestoredbOrig.pl script, but no result.
I can see the same syslog standard report in Device center in Device Diagnostic tool by selecting the device and clicking on syslog standard report.
Can somebody help me in this matter, as this is long pending issue?
Regards,
Chander

Hi Chander,
Share the screen shot to Syslog Collector status.
Thanks-
Afroz

CGNAT: ¿ syslog reporting of CGNAT sessions?

Similar Messages

Maybe you are looking for