Cisco Prime syslog server
Where are syslogs stored, if I point my devices to Cisco Prime acting as my syslog server? I am running 2.0
thanks, Jerry
Hi ,
As of now , this feature is not available , I mean PI will not work as syslog server.
Syslog messages received by PI from managed devices are found under Monitor > Alarms and Events > Syslogs
as you are using PI 2.2 , you will be able to see all device syslog messages (0-7 severity)
That display will show you up to 200,000 messages at a time.
Check the below link for other related details proved by Marvin :
https://supportforums.cisco.com/discussion/12486126/cisco-prime-syslog-functionality#sthash.Wbj2a3lj.dpuf
Thanks-
Afroz
***Ratings Encourages Contributors ****
Similar Messages
-
Cisco PI syslog server configuration
Hi all,
I need to configure the PI as syslog server and get the log file from the PI to read it ??
how can I do it, please advice
thanks in advanceHi,
Which prime version are you using ?
Here is what Prime 2.1 user guide says
http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-1/user/guide/pi_ug/alarms.html#pgfId-1054572
Prime Infrastructure logs all emergency, alert, and critical messages generated by all devices that are managed by Prime Infrastructure.
Prime Infrastructure also logs all SNMP messages and syslogs it receives. To view syslogs, choose Operate > Alarms & Events , then click the Syslogs tab.
Syslog Predefined Filters
Prime Infrastructure uses the following syslog filters:
Severity 0 and 1
Severity 2
Environmental Monitor
Memory Allocation Failure
Catalyst Integrated Security Features
Cisco IOS Firewall Denial of Service
Read this thread as well, it talks about tweak this setting, but it could leads to fill up your prime disk space quickly.
https://supportforums.cisco.com/discussion/11645481/prime-infrastructure-12-syslog
HTH
Rasika
**** Pls rate all useful responses **** -
Is it possible to generate an alarm for especific Syslog Messges sent to Cisco Prime?
Admin > Network > Notification and Action Settings > Syslog Automated Actions
Here is possible to send an email. But I would like to see the alarm in the Monitoring dashboard.It's a bit kludgey but one of the available automated actions is to run a script. The script could be a homegrown utility to generate a trap which is subsequently forwarded to the server itself. The server will then will parse this new "trap" and then display it on the dashboard.
See this document for example. -
Cisco prime syslog functionality
Hello All,
I have added devices in cisco prime. I can see logging option in cisco prime under Administration > Logging . I have given one server IP (10.18.89.43) where I wanted logs to get saved but I am not sure whether prime is acting as a syslog server and if its really collecting those syslog. Also how do I know where its saving those logs on server. (See attached image)
Please help me with exact configuration.Thanks Marvin for valuable reply. I can see Prime generated syslog message for one of added switch under Inventory > Device Management > Network Audit.
But it was just one message as follows:
Syslog Message<189>92196: Apr 21 17:33:55: %SYS-5-CONFIG_I: Configured from console by 5588648 on vty0 (10.18.83.170)
How do I configure Prime so i can increase buffer for these messages. -
Cisco Prime TFTP Server Question
Our organization recently installed Cisco Prime 1.3 on a Linux box. I am used to using the older WCS which also had a built in TFTP server. The old WCS was installed on a Windows Box and thus I was able to navigate to the TFTP server using Windows Explorer and the UNC path. However, I cannot seem to access the TFTP server on the new Prime 1.3 server via that method. I have verified that the TFTP and FTP servers are both enabled in Prime server settings and I have also verified that I can access the FTP port via a PC on the network and that the WLCs on the network are sucessfully backing up to the Prime TFTP server each night.
How can I access the TFTP server to retrieve these WLC backups if needed?you need to enable root access. then you can scp the files out of the directory easily enough.
from cli
root_enable
follow prompts
root
psswd - set password
should be abel to ssh as root at that point, if you can want to say it's /localdisk/tftp, or just ls /localdisk
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered -
Import local net users to Cisco Prime 1.2
Hi,
We have 4400 WLC that has about 400 local users configured under local net users and we are deploying Cisco Prime 1.2 in our company. Does anyone know how to import these users to Cisco prime? I was told that it could only be done manually like re entering all 400 entries to Cisco Prime! if this is the case it 'll be tedious.
Thanks for any help.Hello,
Complete the following steps to migrate data from WCS:
1. Place the WCS export ZIP file (for example, wcs.zip) in a repository or folder (for example, repositories).
2. Log in as the admin user and stop the Cisco Prime Infrastructure server by entering the ncs stop command. Configure the FTP repository on the Cisco Prime Infrastructure appliance using the repository command as shown in configuration snippet below:
pi-appliance/admin# configure
pi-appliance/admin(config)# repository pi-ftp-repo
pi-appliance/admin(config-Repository)# url ftp://209.165.200.227/backup
pi-appliance/admin(config-Repository)# user ftp-user password plain ftp-user
Note: Make sure the archived file is available with the show repository command.
3. Enter the ncs migrate command in order to restore the WCS database.
pi-appliance/admin# ncs migrate wcs-data wcs.zip repository pi-ftp-repo
4. By default, no WCS events are migrated. Enter the ncs start command in order to start the Cisco Prime Infrastructure server after the upgrade is completed. Log in to the Cisco Prime Infrastructure user interface with the root login and the root password.
For mmore information you can refer to the cisco prime infrastructure deployment guide:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps12239/deployment_guide_c07-721232.html#wp9000654 -
I did an opps and deployed the latest IOS image to all of our switches, I have looked and looked for a way to stop the deployment. Right now I have stopped the the service but I need to find out a way to stop the deployment when I turn Prime back on???
ThanksHi,
Prime Infra# ncs stop - Stops the Cisco Prime Infrastructure server
Prime Infra# ncs status - Shows the Cisco Prime Infrastructure server status
Prime Infra# ncs start - Starts the Cisco Prime Infrastructure server
Regards
Dont forget to rate helpful posts -
Can Cisco Prime Infra 2.1 work as syslog server
Hello all,
Customer want Cisco Prime Infra 2.1 to work as syslog server. they want to query text in syslog and get raw log file from Cisco Prime Infra. but when i see in user interface. I think that it cannot query and search text in syslog. but i am not sure whether we can get raw log file per devices from Cisco Prime Infra. Can anyone know about this.?
thanks
sompojHi Sompoj,
In the prime infrastructure Syslogs are directly read from udp port 514 and then filtered
, the non SEV1 and SEV2 syslogs will be dropped and will not be entered into db . The
syslog messages will not be saved into log files .
Thanks-
Afroz
****Ratings Encourages Contributors **** -
Is cisco prime infrastructure support / can be run as syslog server?
Dear All,
is cisco prime infrastructure support / can be run as syslog server?
and,
where i can see network topology diagram, using cisco prime infrastructure?
many thanks,
JerriHello. Cisco Prime LMS will be replaced by Cisco Prime Infrastructure in the near future.
In the current release of Cisco Prime Infrastructure you can't use topology diagrams. This feature is in roadmap.
About syslog, you can send syslogs to Cisco Prime Infrastructure, but I don't recommend using it as syslog server. Please see this link for more information https://supportforums.cisco.com/thread/2179520
Please rate if this helps -
Hi friends,
I have a question about my syslog from Cisco Prime LMS 4.1, the hours from this syslog in the LMS is diferent from my switch log. I dont kown why.. I verified the hours betewen switch y the Cisco Prime is the same(the LMS is over Windows Server 2008R2) . both are the same log but in diferent hours about 5 hours.
maybe I have to configure the hours for Syslog in the Cisco Prime.
Log from Switch
Log from Cisco Prime LMSIf you have LMS, i am not sure, but if you have PI 1.2. Take a look at my post.
Basically, syslog feature doesn't work well. I could see couple of syslog through event / alarm, but syslog itself is not working properly.
https://supportforums.cisco.com/message/3861981#3861981 -
Cisco Prime Soft Appliance not saving changes to syslog.conf
Greetings,
I'm having an issue with the syslog.conf file on a Cisco Prime LMS 4.2.4 soft appliance with a Solaris base. My workplace uses local4 as the logging facility for its network devices, and according to a discussion I found on this site, I need to add the line:
local4.info /var/log/syslog_info
I have attempted this several times; we're approaching at least 5 attempts today. I have attached text files created from putty logs where I've attempted to make the necessary change. I appreciate any assistance the community can provide.
Regards,
RobHi, Afroz,
I really appreciate your assistance, but I'm afraid my hopes have been dashed. The syslog.conf reverted to its original configuration. I will go through my steps to be sure that I understood your suggestion properly.
I edited the syslog.conf to put all messages from local4 in /opt/CSCOpx/conf/syslog-entries.txt. Then, I exited the shell to the console, issued the 'write mem' command, and closed the session. Upon my reconnection, I found that my changes to the syslog.conf were not saved.
Did I make the correct edits in the correct places? Another question, is this bug present in the versions of Prime LMS running Linux and/or Windows, or does it only exist in the soft appliance running Solaris?
Regards,
Rob
Edit:
I'm reading the "Installation and Migration of Cisco Prime" PDF, and it gives me the impression that Cisco Prime is only supported as Windows, Solaris, and soft appliance installations. Is that correct? If it is correct, then installation of Cisco Prime LMS is not supported on other Linux distros such as Ubuntu Server, CentOS, Fedora, etc.?
My thanks. -
Limit Syslog DB size Cisco Prime
Hi All,
I have an issue with my Cisco Prime 4.1.
I have a log file for syslog who’s getting bigger and bigger every day. We have created a purge policy to limit the size to 1 gigabyte. This seamed to be a good solution.
But at the same time, I have a database located under Cscopx/database/rmeng/syslog.db, in three parties, syslogfirst, second and third. The problem is that those files grow and never stop growing (5GB and more), until the disk space is full.
At the start the syslog db didn't grow anymore since I configured the purge job for the syslog file. But after a while the syslog db began to grow again.
Are those 2 (syslog file and DB) related in any way? Does anyone has the same problem? I suppose there is an easy way to limit the size of the syslog db.
Thanks,
Best Regards,
JorisSyslog.log and Syslog*.db are connected to each other. Syslogs sent from device are received in syslog.log and then processed and written in syslog db. All syslog reports come from Db.
To control the log file the logrot utility is used and to control the db the syslog purge and other administrative fuctions are used.
For more details on logrot configuration see :
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.1/user/guide/admin/server.html#wp1055307
For details on administring syslog see :
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.1/user/guide/admin/purgeset.html#wp1060237
Attached is an Syslog Acrhitecture for LMS, hopefully it will be helpful.
-Thanks -
Error coming while installing Cisco Prime 4.2 on Windows Server 2008 R2
Hi,
I'm trying to install Cisco Prime 4.2 on Windows Server 2008 R2. While initiating the installation, message box "Error: csv not found" appears, and the installation terminates.
Is there any csv template need to be copied at any location before hand?Are you installaing LMS 4.2.4 directly ?
Looking at the error ,it looks like ...
If yes then you need to follow the below path:
The installation path of LMS 4.2.4 : LMS 4.2 > LMS 4.2.2 > LMS 4.2.4
Thanks-
Afroz
[Do rate the useful post] -
Cisco Prime Server Specifications
Would anyone happen to know a good server build would be to run Cisco Prime Infrastructure for 5k in network devices. I can only find VM information and not physcial hardware specifications in regards to this.
Kindly check the following link (Data sheet for PI)
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps12239/data_sheet_c78-729088.html
and you can check the server specification from cisco and follow cisco recommended as best practice -
Cisco Prime Infrastructure 1.2 on Windows Server/Hyper-V
Hi Everyone,
In Entriprise environment while designing a BYOD solution we need to integrate ISE3315 with CPI 1.2. I know that Cisco ISE software either runs on 3315 platform or other option is virtual appliance (which is VMware based). Now problem is that we have Hyper-V environment as standard so I need to go with ISE-3315. Here my concern is to I install CPI 1.2 on Hyper-V, or on a Windows Server (2008 or 2012) based machine. Is that doable?
Any help, suggessions would be warmly welcomed.
Thanks,
Azhar...Cisco Prime LMS will slowly be phased out in favor of Cisco Prime Infrastructure and hence there are no new mainline releases are planned to provide support to new Hardware or virtualization support.
However, Prime LMS do support Hyper V Virtualization (As an installable in Windows 2008). Please note that Virtualization technologies like, VMWare and Hyper V virtualization systems are not supported in LMS 5000, and LMS 10000 Devices license, in Windows. VMWare Systems are supported in LMS 5000, and LMS 10000 Devices license in Soft Appliance. Virtualization technologies like, VMWare and Hyper V virtualization systems are not supported in LMS 5000, and LMS 10000 Devices license, in Windows. VMWare Systems are supported in LMS 5000, and LMS 10000 Devices license in Soft Appliance.
For more details on HW and SW requirements for Cisco Prime LMS, please check document here.
-Thanks
Vinod
Maybe you are looking for
-
Query in customer master data upload ....?
Hi Guru's, I am uploading the customer master data from presentaion server to customer tables using functional module SD_CUSTOMER_MAINTAIN_ALL. while check the Function module separatly and it working properley and i am able to ctere customer... and
-
Tolerance limits & Number ranges
1. What is tolerance limits ? Why we need to use it ? What are the steps to configure tolerance limits ? 2. What is number ranges ? How to create number ranges ?
-
HT201269 HOw to sync my iOS7 iphone contacts and calendar with Windows 8 PC
I need help syncing my iPhone iOS7 with Windows 8 Outlook on my PC. Please help
-
Unfortunately my 2009 iMac has been written off due to a faulty motherboard. Thankfully the company we got the mac from are providing me with a brand new one at no cost as I am under warranty. My old hard drive had many important documents and applic
-
How do I open Freehand files created in OS 9 in OS 10?
I had a G3 with OS 9. I created all my artwork in Adobe FreeHand 10. I now have a G4 with OS 10 and I have no idea how to open my files. Can anyone help me please?