LMS 3.2 Syslog DBSpaceReclaimer Tool
Hello
Does anybody knows what can be done after run the DBSpaceReclaimer tool?, I only can delete the SyslogSecond.db
The SyslogFirst, and SyslogThird cannot be deleted, I do not why.
Is another thing more that I can do?, the LMS version is 3.2
Thanks for your help
Regards
Hi Ricardo,
Note: Be careful while you access the DBREADER. if you have any doubt , you can open TAC case to follow the below steps..
You need to go to the dbreader(database) to delete the syslogs tables and put the following in the AD-hoc page:
http://<hostname/ip address>:1741/dbreader/dbreader.html
or
https://<hostname/ip address>:443/dbreader/dbreader.html
User Id: DBA
Password: rmeng db password (default is C2kY2k)
Database Name: rmeng
And click the get tables button.
In the tables look for the SYSLOG_* type of tables and note their names.
example:
SYSLOG_20090631
SYSLOG_20090701
Then go back to the Ad-hoc page and issue the following sql statement:
DROP TABLE SYSLOG_20090701
Delete all the SYSLOG_ files and then issue the below command on the ciscoworks server:
then you need to re-run the DBSPACERECLAIMER script.
Thanks-
Afroz
***Ratings Encourages Contributors ***
Similar Messages
-
Cisco LMS 3.2 SYSLOG not storing after 10 days
Hi ,
Im facing one issue with Cisco LMS 3.2
Issue : The logs is generating only for 10 days and post that im not able to see the logs. I have not done any config changes. The only change i have done is i have completely reinstalled the LMS. i did multiple troubleshoot but not able to resolve this isse. It would be great If any some one is able to help me in this isse. Thanks.
Regards,
JulietDear Vinod
Thanks for ur response and the problem has been resolved.
The purge policy was set to 60 days only .The problem in reports viewing setting.
Syslog folder under LMS would store syslog reports of both the device as well as applications for defined folder size , which in your case was 1 MB ( same can be viewed under log generator option). The older reports would get deleted from the folder upon reaching the limit.
The only way to view device syslog is under following option : Reports -> Reports Generator in LMS GUI where we will have to choose syslog with desired attribute.
Regards,
Juliet -
LMS 4.2 Syslog Collector doesn't work
Hi fellas,
I need a few help for my LMS 4.2, syslog collector on LMS doesnt working even service syslog collector running normaly and also i saw in syslog_info is working to collect syslog from all router but not show up in dashboard monitoring.
I have setting on every router to logging (ip address LMS) but on LMS no any syslog from router can collect.
if you was face problem same with me or know how to solved this issue please share to me
i did a selftest from LMS there are all PASS except nslookup fail, it is has relation with syslog not show up on dashboard??Hi ngoldwat,
thanks for concern my issue.
there are packet capture syslog_info that i get :
May 2 19:07:29 10.29.246.47 62893: 161406: May 2 12:01:57.134 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 2 19:08:23 10.29.246.47 62894: 161407: May 2 12:02:51.170 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 2 19:08:23 10.29.246.47 62895: 161408: May 2 12:02:51.174 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 3 16:42:28 10.29.246.47 62897: 161410: May 3 09:36:54.806 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 3 16:42:28 10.29.246.47 62896: 161409: May 3 09:36:54.774 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 3 16:42:28 10.29.246.47 62898: 161411: May 3 09:36:55.750 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 3 16:43:23 10.29.246.47 62899: 161412: May 3 09:37:49.846 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 3 16:43:23 10.29.246.47 62900: 161413: May 3 09:37:50.018 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 3 16:54:59 10.29.246.47 62902: 161415: May 3 09:49:27.031 UTC: %BGP-3-NOTIFICATION: sent to neighbor 10.29.252.85 4/0 (hold time expired) 0 bytes
May 3 16:54:59 10.29.246.47 62901: 161414: May 3 09:49:27.031 UTC: %BGP-5-ADJCHANGE: neighbor 10.29.252.85 Down BGP Notification sent
May 3 16:55:29 10.29.246.47 62904: 161417: May 3 09:49:55.731 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 3 16:55:29 10.29.246.47 62905: 161418: May 3 09:49:55.923 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 3 16:55:30 10.29.246.47 62906: 161419: May 3 09:49:56.803 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 3 16:57:12 10.29.246.47 62907: 161420: May 3 09:51:38.859 UTC: %BGP-5-ADJCHANGE: neighbor 10.29.252.85 Up
May 3 16:57:24 10.29.246.47 62908: 161421: May 3 09:51:50.875 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 3 16:57:24 10.29.246.47 62909: 161422: May 3 09:51:50.891 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 07:57:31 10.29.246.47 62910: 161423: May 6 00:51:53.214 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 07:57:31 10.29.246.47 62911: 161424: May 6 00:51:53.274 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 07:57:31 10.29.246.47 62912: 161425: May 6 00:51:54.122 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 07:58:26 10.29.246.47 62913: 161426: May 6 00:52:48.291 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 07:58:26 10.29.246.47 62914: 161427: May 6 00:52:48.319 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 08:04:32 10.29.246.47 62915: 161428: May 6 00:58:53.743 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 08:04:32 10.29.246.47 62916: 161429: May 6 00:58:53.867 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 08:04:33 10.29.246.47 62917: 161430: May 6 00:58:54.747 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 08:05:27 10.29.246.47 62919: 161432: May 6 00:59:49.043 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 08:05:27 10.29.246.47 62918: 161431: May 6 00:59:48.819 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 10:59:36 10.29.246.47 62921: 161434: May 6 03:53:56.510 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 10:59:36 10.29.246.47 62920: 161433: May 6 03:53:56.466 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 10:59:36 10.29.246.47 62922: 161435: May 6 03:53:57.422 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 11:00:30 10.29.246.47 62923: 161436: May 6 03:54:51.542 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 11:00:30 10.29.246.47 62924: 161437: May 6 03:54:51.562 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 19:10:31 10.29.246.47 62925: 161438: May 6 12:04:52.034 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 19:10:31 10.29.246.47 62926: 161439: May 6 12:04:52.142 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 19:10:32 10.29.246.47 62927: 161440: May 6 12:04:53.038 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 19:11:26 10.29.246.47 62928: 161441: May 6 12:05:47.110 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 19:11:26 10.29.246.47 62929: 161442: May 6 12:05:47.346 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 19:21:32 10.29.246.47 62930: 161443: May 6 12:15:52.870 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 19:21:32 10.29.246.47 62931: 161444: May 6 12:15:52.970 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 19:21:32 10.29.246.47 62932: 161445: May 6 12:15:53.818 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 19:22:27 10.29.246.47 62934: 161447: May 6 12:16:47.974 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 19:22:27 10.29.246.47 62933: 161446: May 6 12:16:47.946 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 19:27:32 10.29.246.47 62935: 161448: May 6 12:21:53.326 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 19:27:32 10.29.246.47 62936: 161449: May 6 12:21:53.518 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 19:27:33 10.29.246.47 62937: 161450: May 6 12:21:54.462 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 19:28:27 10.29.246.47 62938: 161451: May 6 12:22:48.402 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 19:28:27 10.29.246.47 62939: 161452: May 6 12:22:48.442 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 7 15:46:37 10.29.246.47 62940: 161453: May 7 08:40:56.647 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 7 15:46:37 10.29.246.47 62941: 161454: May 7 08:40:56.679 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 7 15:46:37 10.29.246.47 62942: 161455: May 7 08:40:57.575 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 7 15:47:32 10.29.246.47 62943: 161456: May 7 08:41:51.647 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 7 15:47:32 10.29.246.47 62944: 161457: May 7 08:41:51.659 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 7 19:13:37 10.29.246.47 62945: 161458: May 7 12:07:56.576 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 7 19:13:37 10.29.246.47 62946: 161459: May 7 12:07:56.776 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 7 19:13:38 10.29.246.47 62947: 161460: May 7 12:07:57.688 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 7 19:14:32 10.29.246.47 62948: 161461: May 7 12:08:51.652 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 7 19:14:32 10.29.246.47 62949: 161462: May 7 12:08:51.776 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 8 12:23:38 10.29.246.47 62950: 161463: May 8 05:17:56.001 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 8 12:23:38 10.29.246.47 62952: 161465: May 8 05:17:56.877 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 8 12:23:38 10.29.246.47 62951: 161464: May 8 05:17:56.029 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 8 12:24:33 10.29.246.47 62953: 161466: May 8 05:18:51.074 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 8 12:24:33 10.29.246.47 62954: 161467: May 8 05:18:51.126 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 11 00:39:10 10.29.246.47 62955: 161468: May 10 17:33:23.758 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.17)
May 11 00:50:32 10.29.246.32 144502: 6296699: May 10 17:44:45.413 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.17)
May 11 00:52:24 10.29.246.21 305: 000307: May 10 17:46:36.954 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.17)
May 11 19:28:22 10.29.246.47 62956: 161469: May 11 12:22:34.195 UTC: %SYS-5-CONFIG_I: Configured from console by srte@m on vty0 (10.132.17.186)
May 11 19:28:27 10.29.246.32 144503: 6305725: May 11 12:22:39.494 UTC: %SYS-5-CONFIG_I: Configured from console by srte@m on vty0 (10.132.17.186)
May 11 19:28:56 10.29.246.21 306: 000308: May 11 12:23:08.019 UTC: %SYS-5-CONFIG_I: Configured from console by srte@m on vty0 (10.132.17.186)
May 11 19:38:21 10.29.246.47 62957: 161470: May 11 12:32:32.744 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 11 19:38:25 10.29.246.32 144504: 6305806: May 11 12:32:37.346 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 11 19:38:26 10.29.246.21 307: 000309: May 11 12:32:37.666 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 11 19:51:41 10.29.246.47 62958: 161471: May 11 12:45:52.641 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 11 19:51:54 10.29.246.32 144505: 6305911: May 11 12:46:06.395 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 11 20:01:45 10.29.246.21 308: 000310: May 11 12:55:57.175 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 13 09:17:48 10.29.246.47 62959: 161472: May 13 02:11:56.894 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 13 09:17:48 10.29.246.47 62960: 161473: May 13 02:11:57.034 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 13 09:17:49 10.29.246.47 62961: 161474: May 13 02:11:57.962 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 13 09:18:43 10.29.246.47 62962: 161475: May 13 02:12:51.966 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 13 09:18:43 10.29.246.47 62963: 161476: May 13 02:12:52.046 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 13 10:23:48 10.29.246.47 62966: 161479: May 13 03:17:57.681 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 13 10:23:48 10.29.246.47 62964: 161477: May 13 03:17:56.689 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 13 10:23:48 10.29.246.47 62965: 161478: May 13 03:17:56.801 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 13 10:24:43 10.29.246.47 62967: 161480: May 13 03:18:51.689 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 13 10:24:43 10.29.246.47 62968: 161481: May 13 03:18:51.801 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 13 16:23:00 10.29.246.32 144506: 6327510: May 13 09:17:08.851 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 2 19:07:29 10.29.246.47 62893: 161406: May 2 12:01:57.134 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 2 19:08:23 10.29.246.47 62894: 161407: May 2 12:02:51.170 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 2 19:08:23 10.29.246.47 62895: 161408: May 2 12:02:51.174 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 3 16:42:28 10.29.246.47 62897: 161410: May 3 09:36:54.806 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 3 16:42:28 10.29.246.47 62896: 161409: May 3 09:36:54.774 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 3 16:42:28 10.29.246.47 62898: 161411: May 3 09:36:55.750 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 3 16:43:23 10.29.246.47 62899: 161412: May 3 09:37:49.846 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 3 16:43:23 10.29.246.47 62900: 161413: May 3 09:37:50.018 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 3 16:54:59 10.29.246.47 62902: 161415: May 3 09:49:27.031 UTC: %BGP-3-NOTIFICATION: sent to neighbor 10.29.252.85 4/0 (hold time expired) 0 bytes
May 3 16:54:59 10.29.246.47 62901: 161414: May 3 09:49:27.031 UTC: %BGP-5-ADJCHANGE: neighbor 10.29.252.85 Down BGP Notification sent
May 3 16:55:29 10.29.246.47 62904: 161417: May 3 09:49:55.731 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 3 16:55:29 10.29.246.47 62905: 161418: May 3 09:49:55.923 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 3 16:55:30 10.29.246.47 62906: 161419: May 3 09:49:56.803 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 3 16:57:12 10.29.246.47 62907: 161420: May 3 09:51:38.859 UTC: %BGP-5-ADJCHANGE: neighbor 10.29.252.85 Up
May 3 16:57:24 10.29.246.47 62908: 161421: May 3 09:51:50.875 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 3 16:57:24 10.29.246.47 62909: 161422: May 3 09:51:50.891 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 07:57:31 10.29.246.47 62910: 161423: May 6 00:51:53.214 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 07:57:31 10.29.246.47 62911: 161424: May 6 00:51:53.274 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 07:57:31 10.29.246.47 62912: 161425: May 6 00:51:54.122 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 07:58:26 10.29.246.47 62913: 161426: May 6 00:52:48.291 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 07:58:26 10.29.246.47 62914: 161427: May 6 00:52:48.319 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 08:04:32 10.29.246.47 62915: 161428: May 6 00:58:53.743 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 08:04:32 10.29.246.47 62916: 161429: May 6 00:58:53.867 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 08:04:33 10.29.246.47 62917: 161430: May 6 00:58:54.747 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 08:05:27 10.29.246.47 62919: 161432: May 6 00:59:49.043 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 08:05:27 10.29.246.47 62918: 161431: May 6 00:59:48.819 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 10:59:36 10.29.246.47 62921: 161434: May 6 03:53:56.510 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 10:59:36 10.29.246.47 62920: 161433: May 6 03:53:56.466 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 10:59:36 10.29.246.47 62922: 161435: May 6 03:53:57.422 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 11:00:30 10.29.246.47 62923: 161436: May 6 03:54:51.542 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 11:00:30 10.29.246.47 62924: 161437: May 6 03:54:51.562 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 19:10:31 10.29.246.47 62925: 161438: May 6 12:04:52.034 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 19:10:31 10.29.246.47 62926: 161439: May 6 12:04:52.142 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 19:10:32 10.29.246.47 62927: 161440: May 6 12:04:53.038 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 19:11:26 10.29.246.47 62928: 161441: May 6 12:05:47.110 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 19:11:26 10.29.246.47 62929: 161442: May 6 12:05:47.346 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 19:21:32 10.29.246.47 62930: 161443: May 6 12:15:52.870 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 19:21:32 10.29.246.47 62931: 161444: May 6 12:15:52.970 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 19:21:32 10.29.246.47 62932: 161445: May 6 12:15:53.818 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 19:22:27 10.29.246.47 62934: 161447: May 6 12:16:47.974 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 6 19:22:27 10.29.246.47 62933: 161446: May 6 12:16:47.946 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 19:27:32 10.29.246.47 62935: 161448: May 6 12:21:53.326 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 6 19:27:32 10.29.246.47 62936: 161449: May 6 12:21:53.518 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 6 19:27:33 10.29.246.47 62937: 161450: May 6 12:21:54.462 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 6 19:28:27 10.29.246.47 62938: 161451: May 6 12:22:48.402 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 6 19:28:27 10.29.246.47 62939: 161452: May 6 12:22:48.442 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 7 15:46:37 10.29.246.47 62940: 161453: May 7 08:40:56.647 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 7 15:46:37 10.29.246.47 62941: 161454: May 7 08:40:56.679 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 7 15:46:37 10.29.246.47 62942: 161455: May 7 08:40:57.575 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 7 15:47:32 10.29.246.47 62943: 161456: May 7 08:41:51.647 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 7 15:47:32 10.29.246.47 62944: 161457: May 7 08:41:51.659 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 7 19:13:37 10.29.246.47 62945: 161458: May 7 12:07:56.576 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 7 19:13:37 10.29.246.47 62946: 161459: May 7 12:07:56.776 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 7 19:13:38 10.29.246.47 62947: 161460: May 7 12:07:57.688 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 7 19:14:32 10.29.246.47 62948: 161461: May 7 12:08:51.652 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 7 19:14:32 10.29.246.47 62949: 161462: May 7 12:08:51.776 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 8 12:23:38 10.29.246.47 62950: 161463: May 8 05:17:56.001 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 8 12:23:38 10.29.246.47 62952: 161465: May 8 05:17:56.877 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 8 12:23:38 10.29.246.47 62951: 161464: May 8 05:17:56.029 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 8 12:24:33 10.29.246.47 62953: 161466: May 8 05:18:51.074 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 8 12:24:33 10.29.246.47 62954: 161467: May 8 05:18:51.126 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 11 00:39:10 10.29.246.47 62955: 161468: May 10 17:33:23.758 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.17)
May 11 00:50:32 10.29.246.32 144502: 6296699: May 10 17:44:45.413 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.17)
May 11 00:52:24 10.29.246.21 305: 000307: May 10 17:46:36.954 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.17)
May 11 19:28:22 10.29.246.47 62956: 161469: May 11 12:22:34.195 UTC: %SYS-5-CONFIG_I: Configured from console by srte@m on vty0 (10.132.17.186)
May 11 19:28:27 10.29.246.32 144503: 6305725: May 11 12:22:39.494 UTC: %SYS-5-CONFIG_I: Configured from console by srte@m on vty0 (10.132.17.186)
May 11 19:28:56 10.29.246.21 306: 000308: May 11 12:23:08.019 UTC: %SYS-5-CONFIG_I: Configured from console by srte@m on vty0 (10.132.17.186)
May 11 19:38:21 10.29.246.47 62957: 161470: May 11 12:32:32.744 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 11 19:38:25 10.29.246.32 144504: 6305806: May 11 12:32:37.346 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 11 19:38:26 10.29.246.21 307: 000309: May 11 12:32:37.666 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 11 19:51:41 10.29.246.47 62958: 161471: May 11 12:45:52.641 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 11 19:51:54 10.29.246.32 144505: 6305911: May 11 12:46:06.395 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 11 20:01:45 10.29.246.21 308: 000310: May 11 12:55:57.175 UTC: %SYS-5-CONFIG_I: Configured from console by 1445000 on vty0 (10.132.17.186)
May 13 09:17:48 10.29.246.47 62959: 161472: May 13 02:11:56.894 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 13 09:17:48 10.29.246.47 62960: 161473: May 13 02:11:57.034 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 13 09:17:49 10.29.246.47 62961: 161474: May 13 02:11:57.962 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 13 09:18:43 10.29.246.47 62962: 161475: May 13 02:12:51.966 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 13 09:18:43 10.29.246.47 62963: 161476: May 13 02:12:52.046 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 13 10:23:48 10.29.246.47 62966: 161479: May 13 03:17:57.681 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 13 10:23:48 10.29.246.47 62964: 161477: May 13 03:17:56.689 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Up->Down
May 13 10:23:48 10.29.246.47 62965: 161478: May 13 03:17:56.801 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 13 10:24:43 10.29.246.47 62967: 161480: May 13 03:18:51.689 UTC: %TRACKING-5-STATE: 10 ip sla 10 reachability Down->Up
May 13 10:24:43 10.29.246.47 62968: 161481: May 13 03:18:51.801 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 13 16:23:00 10.29.246.32 144506: 6327510: May 13 09:17:08.851 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Standby -> Active
May 13 16:23:55 10.29.246.32 144507: 6327524: May 13 09:18:03.847 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 13 16:23:55 10.29.246.32 144508: 6327525: May 13 09:18:04.695 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
May 13 16:23:55 10.29.246.32 144507: 6327524: May 13 09:18:03.847 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Active -> Speak
May 13 16:23:55 10.29.246.32 144508: 6327525: May 13 09:18:04.695 UTC: %HSRP-5-STATECHANGE: GigabitEthernet0/2 Grp 10 state Speak -> Standby
i have Subscribed the service correct, you can see ss in my new upload
apparently the last captured syslog 13 May 2013 and not collecting again.
i will appreciate all suggest for this issue. -
LMS 3.2 Syslog is not showing Report
Hello,
I have LMS 3.2 that is having Syslog reporting problem. The syslog messages are being sent to LMS and i can see them in the CSCOpx->log->syslog.log but when i try to generate a 24-hour report,the report is generated without any records.
1- i tried to solved the problem by stopping the cisco works Daemon manger and CWCS syslog services then delete the syslog.log file.
So after restarting these services the report worked for 4-5 mins and then stopped. Therfore the 24-hour report started displaying only the syslog
messages are were pulled within the 4-5 mins that LMS worked.
2- I repeated the process again but this time with no luck at all.
3- I checked the Syslog Collector Status and it showed the following :
SSL certificate status
SSL certificates are valid and properly imported
Collector status
Collector 10.0.1.132 is up and reachable
i have posted the SyslogAnalyzer and SyslogCollector.log
Please if anyone can help i would be appreciated .
Regards,
GeorgeHi,
Its still possible that some services on server might be using the ports. Another possibility is to have improper SSL certificates. Try to re-generate SSL certificates with the host name of the server and not the FQDN even though server is now part of AD.
Here is the procedure to re-generate SSL Certificates from CLI :-
a.Stop Daemons
C:\net stop crmdmgtd
b. Remove server.* under NMSROOT\MDC\Apache\conf\ssl
c. Run the following commands:
CSCOpxMDC\Apache\perl ConfigSSL.pl -disable
CSCOpx\MDC\Apache\perl ConfigSSL.pl -enable (fill up the certificate info) when you will be prompt to enter server host name. kindly enter the server name and not FQDN.
If you are not using SSL connectivity to CiscoWorks
CSCOpx\MDC\Apache\bin\ConfigSSL.pl -disable
d.Restart Daemons
c:\net start crmdmgtd.
Since the server is now part of the domain, kindly make sure you have server FQDN entry into the server host file at location :- WINDOWS\system32\drivers\etc\host
If it still dont work then we need to enable the debugging for Syslog Collector. This can achieved by changing the INFO to DEBUG in Collector.propert
ies file. Here is the procedure.
1> Stop syslog collector process on the server (you can do this from the command line prompt):
> pdterm SyslogCollector
2. Open and edit the
CSCOpx/MDC/tomcat/webapps/rme/WEB-INF/classes/com/csco/nm/rmeng/csc/data/Collector.propert
ies file, and change the line from
DEBUG_LEVEL=INFO
to
DEBUG_LEVEL=DEBUG
Then, save the file.
3. Restart syslog collector process.
> pdexec SyslogCollector
Try to reproduce the issue and send debug log from location :- CSCOpx/log/SyslogCollector.log
Thanks,
Gaganjeet -
LMS 4.2 Syslog File Size and Management
Hello All
i have LMS 4.2 in Network with 100 devices, all of my devices have ACL so, there are too many logs in syslog
after a while the size of the log files in /var/log files (boot.log, messages.log) going to have huge size, something about 20G for each one
I'm looking for a way to reduce the size, is it possible to use Log Rotation or not??
Best Regards
John MayerIdeall Logs are supposed to fill the syslog file sooner or later. Though logrot is amongst a best way to keep the Syslog file size in check.
You can check the procedure for Logrot here :
Configuring Log Files Rotation
Additionally, there are some more Syslog Administrative Tasks which can keep your syslog in control. You can perform the following Administrative tasks:
•Back up Syslog messages (see Setting the Syslog Backup Policy).
•Purge Syslog messages (see Setting the Syslog Purge Policy).
•Perform a Forced Purge (see Performing a Syslog Forced Purge).
-Thanks -
LMS 3.2 - Syslog Config fetch not working
Hello,
the syslog config fetch on my LMS 3.2 with RME 4.3.0 is not working.
I get syslog messages from devices and the count in the syslog collector status is okay.
But in the syslog message summary in device center the count is not getting higher with every message.
And the config fetch is not working.
I changed the logging level in the collector-properties to "debug" and got the following messages for a device which I want to fetch:
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, FcssEmblemProcessor - About to process the syslog string : Jun 07 14:40:23 10.155.224.102 53: Jun 7 14:39:57: %SYS-5-CONFIG_I: Configured from console by shru1307 on vty0 (4.26.16.20)
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, Parser : com.cisco.nm.rmeng.fcss.common.FcssEmblemAFormatParser@13bd574
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, Parser : com.cisco.nm.rmeng.fcss.common.FcssEmblemBFormatParser@13adc56
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, Parser : com.cisco.nm.rmeng.fcss.common.FcssGenericFormatParser@157aa53
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, Parser : com.cisco.nm.rmeng.fcss.common.CSSSyslogFormatParser@6f50a8
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, EmblemA not valid.
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, EmblemB not valid.
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, EmblemA valid.
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, Setting daemon date
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, After adjusting the offset Mon Jun 07 14:40:23 CEST 2010 GMT 7 Jun 2010 12:40:23 GMT
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, Parsed using the parser : com.cisco.nm.rmeng.fcss.common.FcssGenericFormatParser@157aa53
SyslogCollector - [Thread: EvaluatorThread-0] DEBUG, 07 Jun 2010 14:40:24,546, FcssEmblemProcessor - Valid EMBLEM format. Passing on...
SyslogCollector - [Thread: FilterThread-0] DEBUG, 07 Jun 2010 14:40:24,546, Converted syslog to filter string. Filter string is 10.155.224.102;;;SYS-5-CONFIG_I: Configured from console by shru1307 on vty0 (4.26.16.20)
SyslogCollector - [Thread: FilterThread-0] DEBUG, 07 Jun 2010 14:40:24,546, ^((10\.161\.1\.45);;;(\S+)(-(\S+))?-(.*)(-(.*\s*))?\s*:\s*.*)$
SyslogCollector - [Thread: FilterThread-0] DEBUG, 07 Jun 2010 14:40:24,546, FcssFilterPatternSet- inside 6
SyslogCollector - [Thread: FilterThread-0] DEBUG, 07 Jun 2010 14:40:24,546, getInterestedSubscribers() - Incrementing filtered count for HNW2K3CISCO03
SyslogCollector - [Thread: FilterThread-0] DEBUG, 07 Jun 2010 14:40:24,546, getInterestedSubscribers() - No interested subscribers. Returning null.
SyslogCollector - [Thread: FilterThread-0] DEBUG, 07 Jun 2010 14:40:24,546, Entered zero size
I attached the AnalyzerDebug.log, syslog_debug.log, SyslogAnalyzer.log and SyslogCollector.log for further informations.
Thanks for any advice!
SvenAfter I restarted the processes the syslog queue is empty and the config fetch works :-)
Output from syslog.log:
Jun 15 09:37:51 4.72.80.13 3131: Jun 15 09:36:59.881: %SYS-5-CONFIG_I: Configured from console by shru1307 on vty0 (4.26.16.20)
Output from AnalyzerDebug.log:
[ Tue Jun 15 09:37:52 CEST 2010 ],INFO ,[Thread-2],com.cisco.nm.rmeng.dcma.client.RmeSaDcmaActionHandler,act,74,Invoking Config collection for syslog message
[ Tue Jun 15 09:37:52 CEST 2010 ],INFO ,[Thread-2],com.cisco.nm.rmeng.dcma.client.RmeSaDcmaActionHandler,act,81,Before triggering syslog config fetch
[ Tue Jun 15 09:37:52 CEST 2010 ],INFO ,[Thread-2],com.cisco.nm.rmeng.dcma.client.RmeSaDcmaActionHandler,act,83,Syslog Timestamp Tue Jun 15 09:37:51 CEST 2010
[ Tue Jun 15 09:37:52 CEST 2010 ],INFO ,[Thread-2],com.cisco.nm.rmeng.dcma.client.RmeSaDcmaActionHandler,act,85,DCMA Endtime String 2010-06-10 00:51:02.94
[ Tue Jun 15 09:37:52 CEST 2010 ],INFO ,[Thread-2],com.cisco.nm.rmeng.dcma.client.RmeSaDcmaActionHandler,act,90,DCMA Endtime String after formatting Thu Jun 10 00:51:02 CEST 2010
[ Tue Jun 15 09:37:52 CEST 2010 ],INFO ,[Thread-2],com.cisco.nm.rmeng.dcma.client.RmeSaDcmaActionHandler,act,98,Buffer Time after adding 5 minutes Thu Jun 10 00:56:02 CEST 2010
[ Tue Jun 15 09:37:52 CEST 2010 ],INFO ,[Thread-2],com.cisco.nm.rmeng.dcma.client.RmeSaDcmaActionHandler,act,101,Triggering fetch on syslog since Timestamp > bufferTime
My last question is now, what can I do that the syslog queue will not getting full one more time?
Is logrot a solution? My syslog.log will be rotated at 128 MB.
Thanks a lot!
Sven -
LMS 3.2 Syslog purge job failed.
We installed LMS 3.2 on windows server 2003 enterprise edition. RME version is 4.3.1. We have created daily syslog purge job from RME> Admin> Syslog> Set Purge Policy. This job failes with the following error.
"Drop table failed:SQL Anywhere Error -210: User 'DBA' has the row in 'SYSLOG_20100516' locked 8405 42W18
[ Sat Jun 19 01:00:07 GMT+05:30 2010 ],ERROR,[main],Failed to purge syslogs"
After server restart job will again execute normally for few days.
Please check attached log file of specified job.
RegardsThe only reports of this problem in the past has been with two jobs being created during an upgrade. This would not have been something you would have done yourself. I suggest you open a TAC service request so database locking analysis can be done to find what process is keeping that table locked.
-
Hi,
I am trying to setup syslog server on LMS 4.0.
Everything seems to be working fine but I have a lot of stragne logs in my syslog.log file.
Every single day I receive logs like :
Mar 05 09:31:03 127.0.0.1 100: <30> dmgt[1136]: 3007(I):Started application(1015) "e:\CSCOpx\bin\cwjava.exe -cw:jre lib/jre -cp e:\CSCOpx\MDC\tomcat\shared\lib\MICE.jar;e:\CSCOpx\MDC\tomcat\shared\lib\NATIVE.jar;e:\CSCOpx\MDC\tomcat\shared\lib\jdom.jar;e:\CSCOpx\MDC\tomcat\shared\lib\xalan.jar;e:\CSCOpx\MDC\tomcat\shared\lib\xerces.jar;e:\CSCOpx\MDC\tomcat\common\lib\servlet.jar;e:\CSCOpx\MDC\tomcat\shared\lib\castor-0.9.5.jar;e:\CSCOpx\MDC\tomcat\shared\lib\castor-0.9.5-xml.jar;e:\CSCOpx\lib\classpath;e:\CSCOpx\www\classpath;www\classpath\vbjorb.jar;MDC\tomcat\webapps\upm\WEB-INF\classes;lib\jre\lib\endorsed\jacorb.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\ctm.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\log4j.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\jep-3.2.0.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\struts.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\upmcmn.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\upmplr.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\xstream-1.1.1.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\xpp3.jar;MDC\tomcat\webapps\up
Mar 05 09:31:03 127.0.0.1 100: <30> dmgt[1136]: 3009(I):Application "1018" registered.
Mar 05 09:31:03 127.0.0.1 100: <30> dmgt[1136]: 3007(I):Started application(1018) "e:\CSCOpx\bin\cwjava.exe -cw:jre lib/jre -cp e:\CSCOpx\MDC\tomcat\shared\lib\MICE.jar;e:\CSCOpx\MDC\tomcat\shared\lib\NATIVE.jar;e:\CSCOpx\MDC\tomcat\shared\lib\jdom.jar;e:\CSCOpx\MDC\tomcat\shared\lib\xalan.jar;e:\CSCOpx\MDC\tomcat\shared\lib\xerces.jar;e:\CSCOpx\MDC\tomcat\common\lib\servlet.jar;e:\CSCOpx\MDC\tomcat\shared\lib\castor-0.9.5.jar;e:\CSCOpx\MDC\tomcat\shared\lib\castor-0.9.5-xml.jar;e:\CSCOpx\lib\classpath;e:\CSCOpx\www\classpath;www\classpath\vbjorb.jar;MDC\tomcat\webapps\upm\WEB-INF\classes;lib\jre\lib\endorsed\jacorb.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\log4j.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\jep-3.2.0.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\ags.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\xdi.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\ctm.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\deviceselector.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\mibmgr.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\upmcmn.jar;MDC\tomcat\webapps\upm\W
Mar 05 09:31:36 127.0.0.1 100: <30> dmgt[1136]: 3021(I):Died method called for process (1018, pid=6600).
Mar 05 09:31:36 127.0.0.1 100: <30> dmgt[1136]: 3011(I):Application "1018" unregistered.
Mar 05 09:31:36 127.0.0.1 100: <30> dmgt[1136]: 3021(I):Died method called for process (1015, pid=5632).
Mar 05 09:31:36 127.0.0.1 100: <30> dmgt[1136]: 3011(I):Application "1015" unregistered.
Mar 05 10:48:01 127.0.0.1 100: <30> dmgt[1136]: 3021(I):Died method called for process (UTMajorAcquisition, pid=10388).
Mar 05 08:31:03 127.0.0.1 100: <30> dmgt[1136]: 3009(I):Application "1015" registered.
Mar 05 08:31:03 127.0.0.1 100: <30> dmgt[1136]: 3007(I):Started application(1015) "e:\CSCOpx\bin\cwjava.exe -cw:jre lib/jre -cp e:\CSCOpx\MDC\tomcat\shared\lib\MICE.jar;e:\CSCOpx\MDC\tomcat\shared\lib\NATIVE.jar;e:\CSCOpx\MDC\tomcat\shared\lib\jdom.jar;e:\CSCOpx\MDC\tomcat\shared\lib\xalan.jar;e:\CSCOpx\MDC\tomcat\shared\lib\xerces.jar;e:\CSCOpx\MDC\tomcat\common\lib\servlet.jar;e:\CSCOpx\MDC\tomcat\shared\lib\castor-0.9.5.jar;e:\CSCOpx\MDC\tomcat\shared\lib\castor-0.9.5-xml.jar;e:\CSCOpx\lib\classpath;e:\CSCOpx\www\classpath;www\classpath\vbjorb.jar;MDC\tomcat\webapps\upm\WEB-INF\classes;lib\jre\lib\endorsed\jacorb.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\ctm.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\log4j.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\jep-3.2.0.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\struts.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\upmcmn.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\upmplr.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\xstream-1.1.1.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\xpp3.jar;MDC\tomcat\webapps\up
Mar 05 08:31:03 127.0.0.1 100: <30> dmgt[1136]: 3009(I):Application "1018" registered.
Mar 05 08:31:03 127.0.0.1 100: <30> dmgt[1136]: 3007(I):Started application(1018) "e:\CSCOpx\bin\cwjava.exe -cw:jre lib/jre -cp e:\CSCOpx\MDC\tomcat\shared\lib\MICE.jar;e:\CSCOpx\MDC\tomcat\shared\lib\NATIVE.jar;e:\CSCOpx\MDC\tomcat\shared\lib\jdom.jar;e:\CSCOpx\MDC\tomcat\shared\lib\xalan.jar;e:\CSCOpx\MDC\tomcat\shared\lib\xerces.jar;e:\CSCOpx\MDC\tomcat\common\lib\servlet.jar;e:\CSCOpx\MDC\tomcat\shared\lib\castor-0.9.5.jar;e:\CSCOpx\MDC\tomcat\shared\lib\castor-0.9.5-xml.jar;e:\CSCOpx\lib\classpath;e:\CSCOpx\www\classpath;www\classpath\vbjorb.jar;MDC\tomcat\webapps\upm\WEB-INF\classes;lib\jre\lib\endorsed\jacorb.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\log4j.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\jep-3.2.0.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\ags.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\xdi.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\ctm.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\deviceselector.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\mibmgr.jar;MDC\tomcat\webapps\upm\WEB-INF\lib\upmcmn.jar;MDC\tomcat\webapps\upm\W
Mar 05 08:31:39 127.0.0.1 100: <30> dmgt[1136]: 3021(I):Died method called for process (1015, pid=7600).
Mar 05 08:31:39 127.0.0.1 100: <30> dmgt[1136]: 3011(I):Application "1015" unregistered.
Mar 05 08:31:39 127.0.0.1 100: <30> dmgt[1136]: 3021(I):Died method called for process (1018, pid=6596).
Mar 05 08:31:39 127.0.0.1 100: <30> dmgt[1136]: 3011(I):Application "1018" unregistered.
I dont want to get any logs from 127.0.0.1. Is it possible to filter out logs from server ?
Thanks and best regars.I don't think you can easily stop LMS from logging its own starting and stopping of processes.
Why does this bother you? It doesn't appear in you reports
Cheers,
Michel -
Can I and then how do I subscribe my LMS 4.02 to my LMS 3.2 syslog collector?
We are migrating to LMS 4.0.2, but our syslogs are curerently being sent to our LMS 3.2 server. Can I subscribe to our LMS3.2 syslog collector? Or
read this:
http://support.apple.com/kb/HT2109 -
CiscoWorks LMS 4.1, syslog analyzer parsing non-Cisco device.
Hello.
Can Syslog Analyzer parse syslog messages coming from a Non-Cisco device?
I'm trying to parse message from a HP Virtual Connect module without success.
Thanks.
AndreaHi Andrea,
You could use syslog-ng to write a generic mnemonic into the message and forward it to LMS.
Something like:
syslog-ng->add fac-sev-mne: message->lms
However, I would also caution you that LMS is *not* meant to be a "syslog" manager - there are usually way to many syslog messages in most environments for it to handle that many - which is why most syslog managers are standalone servers.
In order to make sure that the NMS systems that syslog-ng forward messages to receive the correct source, syslog-ng needs to be compiled with the source spoof option. This will allow messages received on other NMS’s (such as LMS) to appear to come from the original devices rather than from the syslog-ng server.
Compiling from source:
Install the syslog-ng prerequisites from Balabit
You must configure syslog-ng with --enable-spoof-source in order to enable the spoof source feature (which is disabled by default).
./configure --enable-spoof-source
make && make install
If you run into any issues during the installation, you can refer to the syslog-ng forum or you can refer to the syslog-ng knowledge base
Lastly, here's a great paper on syslog management:
Building Scalable Syslog Management Solutions -
CiscoPrime LMS 4.1 Syslog Report Empty
I have a new install of LMS 4.1 on a Windows server I'm trying out. I have switches and firewalls syslogging to the system, but when I run any kind of Syslog report (Reports > Fault and Event > Syslog) it's always blank. I ran a Wireshark capture on the server and it's definitely receiving a ton of syslog data from the systems. What am I missing here? :-)
perhaps this is of some help for anybody....
I just troublshoot a LMS 4.2.1 installation on windows where the syslog report did not show any syslog message ("no data available") nor did any syslog report had any data.
SyslogCollector and SyslogAnalyzer where running fine and the server itself was successfully subscribed to the SyslogCollector (Admin > Collection Settings > Syslog > Syslog Collector Status). What was really suprising was the fact, that the counter for "Forwarded" messages was rising when syslogs arrived in the syslog.log file.
In the end it turns out, that this was a fresh installation of LMS 4.2 (updated to LMS 4.2.1) and the effort to restore the database from the old LMS 3.2.1 system failed. To get the minimum data form the old LMS system, only the devices were exported form the old system and imported into the new system - a discovery was never done.
In the AnalyzerDebug.log I found that while the system was trying to insert the messages into the syslog db the process fails because it could not associate a DcrId to the IP which was sending the syslog message.
Also DNS was running in round-robin mode in the network. I finially added the devices to the hosts file, did run a discovery and the syslog messages started to show up in the report.
to see the relevant messages in the AnalyzerDebug.log, debugging for SyslogAnalyzer must be turned on.
these are the troubleshooting steps and this is what I saw in the AnalyzerDebug.log:
=======================================
enable debugging
Admin > System > Debug Settings > Config and Image Management Debugging Settings
Set Application Logging Levels >> SyslogAnalyzer (scroll down)
set Syslog Analyzer and Syslog Analyzer User Interface from INFO to DEBUG
(do not foret to reset debugging when finished!)
NMSROOT\log\AnalyzerDebug.log
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],com.cisco.nm.rmeng.util.DCRWrapperAPIs,getResultFromQuery,4008,Counter : 17
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],com.cisco.nm.rmeng.inventory.InvAPIs,getDeviceIdsFromIPAddresses,3038,For IP Address: 192.168.x.x Device id is:null
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Device id not found even in the inventory
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Found the device id as null
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Attempting to insert the syslog into database
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Preparing to hand of syslog to the database handler
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Syslog length=1
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3], Time stamp of the syslog received is : Fri Aug 10 14:34:02 CEST 2012 GMT 10 Aug 2012 12:34:02 GMT
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Inside execute mothod
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Insert into SYSLOG_20120710(Syslog_Device_Id,Syslog_Device_Name,Syslog_TimeStamp,Syslog_Facility,Syslog_SubFacility,Syslog_Severity, Syslog_Mnemonic,Syslog_Description )values(?,?,?,?,?,?,?,?)
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Inside Retry count
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Connection is now false
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Recreated the statement object
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Row count 1
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Added syslog to the database handler
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Insertion of syslog into database is done
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Attempting to find interested actions, bypassing
[ Fri Aug 10 14:34:54 CEST 2012 ],DEBUG,[ActionThread3],Syslog is found to be unexpected. No actions will be taken, returing
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Preparing to get collector status
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Current no. of collectors is 1
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Processing for the subscription LMSServerNmeLMSServerName
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],getCollector =192.168.y.y
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Port4444
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Connected to the collector 192.168.y.y@4444
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Gathered status from collector
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Captured the status from the collector
[ Fri Aug 10 14:36:33 CEST 2012 ],DEBUG,[Thread-15],Done with the status collection
================================================== -
LMS 4.2 Syslog PDF Report problem
Hi,
when I generate a Syslog 24 hour report and export the result to pdf the font size of the pdf is much too big so I get one page per line.
The same thing happens when I send the report via email attachment (pdf).
So the reports are not usable.
Can I change the settings? (fontsize?)
Other pdf-reports are ok, e.g. inventory etc.
regards
NotkerHi,
when I generate a Syslog 24 hour report and export the result to pdf the font size of the pdf is much too big so I get one page per line.
The same thing happens when I send the report via email attachment (pdf).
So the reports are not usable.
Can I change the settings? (fontsize?)
Other pdf-reports are ok, e.g. inventory etc.
regards
Notker -
Hi,
What tools do you guys use to analize your ASA logs? I had tested Splunk a few months ago... but it was crushing often, so I couldn't really put into the production. Any recommendations?
thanks,
lfHi AnujaMoharir,
Welcome to MSDN.
I am afraid that as Renee Culver said, these forums donot support VB6, you could refer to this thread:
Where to post your VB 6 questions
You could consider posting this issue in these forums below:
These forums do not support Visual Basic 6, however there are many third-party support sites that do. If you have a VB6-related question please visit these popular forums:
VB Forums
VB City
Thanks for your understanding.
Best Regards,
Youjun Tang
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey. -
LMS 3.2 Syslog Collector error
Hi,
At RME: ToolsSyslogSyslog Collector Status screen at table Collector Status No records.
I had changed hostname on this server and i have ran /opt/CSCOpx/bin/perl /opt/CSCOpx/bin/hostnamechange.pl script with proprer parameters.
Now I cannot add collector, because of "SSL certificate status" error:
SSL certificate issue occurred, check if:
1. The Self-signed Certificates are valid. For example, Check the certificate expiry date on the servers.
2. The Self-signed Certificates of this server are copied to the Syslog Collector server and vice-versa.
To do this, go to Common Services > Server > Security > Multi-Server Trust Management > Peer Server Certificate Setup. and add the certificate. See the User Guide for CiscoWorks Common Services for more details..
3.The SyslogCollector process on Syslog Collector server and the SyslogAnalyzer process in the current working server are restarted after Step 2.
4.Both hosts are reachable by host name.
Collector status : Could not connect to the collector _myhostname_._mydomainname_ due to SSL certificate issue
I use an third party Certificate, and https access is working propery for user access.
I want to run Syslog Collector locally, syslog file is a local server hence I use syslog-ng for other reason.
This is my SyslogCollector log:
SyslogCollector - [Thread: main] INFO , 24 Mar 2011 16:47:45,305, Logging System Initialized.
SyslogCollector - [Thread: main] INFO , 24 Mar 2011 16:47:45,308, System Initialized.
SyslogCollector - [Thread: main] INFO , 24 Mar 2011 16:47:45,408, Queue Cap 100000
SyslogCollector - [Thread: main] INFO , 24 Mar 2011 16:47:47,699, Service started...
How can I correct this situation, how can I run Syslog Collector.
BalazsTry unsubscribing and subscribing the collector so it can accept the updated info. If that does not work, post the SyslogAnalyzerUI.log and SyslogCollector.log from CSCOpx/log directory.
-
LMS 3.2 syslog connection refused
Hi,
I get the following error:
SyslogCollector - [Thread: SyslogObjectForwarder] ERROR, 27 Mar 2012 09:02:12,254, Could not send syslogs, removing the subscriber...Connection refused: connect
SyslogCollector - [Thread: SyslogObjectForwarder] ERROR, 27 Mar 2012 09:03:15,223, Could not send syslogs, removing the subscriber...Connection refused: connect
Syslog subscription seems ok but syslog messages are dropped and not forwarded:
I attached SyslogCollector.log, SyslogAnalyzer.log, AnalyzerDebug.log
TnaksHI,
Ignore these error messages as these comes often. What is important to note is if the Collector is subscibed properly.
What is important to check is if the counters are incrementing even if Filetered or Dropped and see for Received as well.
if so, please make sre your Filters are configured properly as only due to filter the Syslog message are not forwarded. Check different combinations which work, following is the way they work :
-If you DISABLE all the filters and have the filter type as KEEP, then all the syslog messages are processed (kept).
-If you DISABLE all the filters and have the filter type as DROP, then all the syslog messages are dropped. No filtering is done but everything will be dropped.
-If you ENABLE all the filters and have the filter type as KEEP, then all the syslog messages that match the filter criteria are processed.
-If you ENABLE all the filters and have the filter type as DROP, then all the syslog messages that match the filter criteria are dropped.
Check mine for example :
-Thanks
Vinod
Maybe you are looking for
-
Howt to connect JAva program to Unixbox?
Hi, I have a program developed in java which will read XML file in Unixbox . The JAva program connects through the server name, liogin id, username..to the unixbox(for eg: server name:ftp432, login id-sta, pswd-sta). CAn anyone tell me the code that
-
Hi, Can anybody tell me how to hide a column in a table using smart forms.
-
Hello 2 Questions I'm affraid Question 1 I am using Captivate 5. Is there a way to say have 10 questions in a question bank but randomly only ever show 5 questions. For example two people sitting next to each other at a PC both taking the same cours
-
Hello experts. Want to you suggest me best solution of my task. Requirements of an app (mobile) are following : 1. when user opens app on device - He sees some data from SAP on UI, but He does not need to login (some hardcoded user need to be used he
-
I've recently change my Apple ID email so I've recently went to the App Store to download some apps that I've bought a while ago and none of them are showing. I've also searched for the app and wants me to buy it again.