Remote syslog configuration

Hi All,
I have done the syslog remote configuration on the switch. However, logs are not being received to the server and when doing capture on the firewall, we have noticed that the switch is not sending the logs to the default port UDP 514 but to random port each time ( being incremented ).
Kindly find below the logs.
Can you please advise what's wrong?
Deny udp src MPROR:10.160.124.166/40865 dst To-Falcon:10.19.28.221/33437 by access-group "
Oct 28 17:56:32 Deny udp src MPROR:10.160.124.166/33007 dst To-Falcon:10.19.28.221/33438 by access-group "
Oct 28 17:56:35 Deny udp src MPROR:10.160.124.166/32790 dst To-Falcon:10.19.28.221/33439 by access-group "
Oct 28 17:56:38 Deny udp src MPROR:10.160.124.166/37362 dst To-Falcon:10.19.28.221/33440 by access-group "
Oct 28 17:56:41 Deny udp src MPROR:10.160.124.166/35964 dst To-Falcon:10.19.28.221/33441 by access-group "
Oct 28 17:56:44 Deny udp src MPROR:10.160.124.166/33659 dst To-Falcon:10.19.28.221/33442 by access-group "
Oct 28 17:56:47 Deny udp src MPROR:10.160.124.166/33024 dst To-Falcon:10.19.28.221/33443 by access-group "
Oct 28 17:56:50 Deny udp src MPROR:10.160.124.166/36429 dst To-Falcon:10.19.28.221/33444 by access-group "
Oct 28 17:56:53 Deny udp src MPROR:10.160.124.166/38646 dst To-Falcon:10.19.28.221/33445 by access-group "
Oct 28 17:56:56 Deny udp src MPROR:10.160.124.166/37650 dst To-Falcon:10.19.28.221/33446 by access-group "
Oct 28 17:56:59 Deny udp src MPROR:10.160.124.166/34049 dst To-Falcon:10.19.28.221/33447 by access-group "
Oct 28 17:57:02 Deny udp src MPROR:10.160.124.166/39291 dst To-Falcon:10.19.28.221/33448 by access-group "
Oct 28 17:57:05 Deny udp src MPROR:10.160.124.166/33938 dst To-Falcon:10.19.28.221/33449 by access-group "
Oct 28 17:57:08 Deny udp src MPROR:10.160.124.166/42739 dst To-Falcon:10.19.28.221/33450 by access-group "
Oct 28 17:57:11 Deny udp src MPROR:10.160.124.166/33979 dst To-Falcon:10.19.28.221/33451 by access-group "
Thanks.
Jean

NPE_SWITCH#sh version
Cisco IOS Software, C3750 Software (C3750-IPBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Thu 19-Jul-07 19:15 by nachen
Image text-base: 0x00003000, data-base: 0x01080000
ROM: Bootstrap program is C3750 boot loader
BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.2(25r)SEE4, RELEASE SOFTWARE (fc1)
NPE_SWITCH uptime is 46 weeks, 4 days, 23 hours, 47 minutes
System returned to ROM by power-on
System image file is "flash:c3750-ipbase-mz.122-35.SE5/c3750-ipbase-mz.122-35.SE5.bin"
cisco WS-C3750G-24TS-1U (PowerPC405) processor (revision F0) with 118784K/12280K bytes of memory.
Processor board ID FOC1332Z2UY
Last reset from power-on
2 Virtual Ethernet interfaces
56 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.
512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 00:26:CA:2E:C2:80
Motherboard assembly number     : 73-10219-07
Power supply part number        : 341-0098-02
Motherboard serial number       : FOC13311PW2
Power supply serial number      : DCA132891JW
Model revision number           : F0
Motherboard revision number     : D0
Model number                    : WS-C3750G-24TS-S1U
System serial number            : FOC1332Z2UY
Top Assembly Part Number        : 800-26859-01
Top Assembly Revision Number    : E0
Version ID                      : V03
CLEI Code Number                : CNMWS00ARC
Hardware Board Revision Number : 0x09
Switch   Ports Model              SW Version              SW Image
     1   28     WS-C3750G-24TS-1U 12.2(35)SE5             C3750-IPBASE-M
*    2   28     WS-C3750G-24TS-1U 12.2(35)SE5             C3750-IPBASE-M
Logging Configuration :
logging source-interface Vlan668
logging 10.19.28.221
Thanks.

Similar Messages

Time Capsule remote syslog configuration

I am trying to configure my time capsule to write its syslog to my imac. I am running Snow Leopard and the time capsule is at the latest patch 7.4.2. I have gone into the airport utility and set the syslog destination address to 192.168.0.44, syslog level 6. Allow SNMP and allow SNMP over Wan are both unchecked. I made the change and restarted the TC. On the target machine I editted /etc/syslog.conf, adding:
local0.* /var/log/AirPort.log
rebooted the imac and nothing. I am not seeing the log written on the 192.168.0.44 machine, the TC is 192.168.0.1
I have searched the internet, man pages, etc and have found nothing that sheds light on this issue. What am I missing?

Hi, welcome to the Apple discussions. I know the layout can be a bit confusing, but you've managed to post your question in the MacBook forum. A lot fewer people here will be able to help with such a specialized question.
However, you can try asking in the Time Capsule forum:
http://discussions.apple.com/forum.jspa?forumID=1253
Or in the Leopard Time Machine forum:
http://discussions.apple.com/forum.jspa?forumID=1227
Good luck!

ISE Guest create/delete logging into remote syslog

Hello,
I'm trying to setup guest action (creation, deletion, suspend) logging to remote syslog. I created remote logging target and set this target to Guest logging category with info priority. But I don't receive any messages when Sponsor creates or delete guest account.
By the message catalog, these messages should be in Guest category with severity info.
Does anyone know whats wrong? ISE version is 1.2 Patch 5.
Thanks
Jiri
I'm attaching picture of configuration:

Hello,
thank you for the reply. The port is opened it's syslog server also for other devices. I tried to change facility to LOCAL6, but its the same. I only receive this message when I suspend or delete guest user:
Jan 9 12:59:16 ise-demo-pri CISE_Guest 0000000838 1 0 2014-01-09 12:59:16.569 +01:00 0000085231 86028 INFO Guest: Successfully performed CoA termination(s) for a deleted guest or a suspended guest, ConfigVersionId=35,
Jiri

Coherence::net::messaging::ConnectionException: could not establish a connection to one of the following addresses: {10.242.152.242/10.242.152.242:8088}; make sure the "remote-addresses" configuration element contains an address and port of a running TcpA

Hi
I have installed coheI have installed coherence server "fmw_12.1.3.0.0_coherence_Disk1_1of1.zip" along with Examples on windows machine and C++ client coherence-cpp-12.1.3.0.0b51709-windows-x86-vs2012.zip on the same machine.
I have built the "contacts" C++ Example successfully and while I execute this "contacts" using run I am facing TcpAcceptor error.
On my coherence server the TcpAcceptor is listening on port 8088, so I have modified the extend-cache-config.xml file with values "ip address of my windows machine" and port as "8088".
All the time I am getting below error,
coherence::net::messaging::ConnectionException: could not establish a connection to one of the following addresses: {10.242.152.242/10.242.152.242:8088}; make sure the "remote-addresses" configuration element contains an address and port of a running TcpAcceptor
    at class coherence::lang::TypedHandle<class coherence::component::net::extend::PofConnection> __thiscall coherence::component::util::TcpInitiator::openConne
ction(void)(TcpInitiator.cpp:307)
    at coherence::component::util::TcpInitiator::openConnection
    at coherence::component::util::Initiator::ensureConnection
    at coherence::component::net::extend::RemoteCacheService::openChannel
    at coherence::component::net::extend::RemoteService::doStart
    at coherence::component::net::extend::RemoteService::start
    at coherence::component::util::SafeService::startService
    at coherence::component::util::SafeService::restartService
    at coherence::component::util::SafeService::ensureRunningServiceInternal
    at coherence::component::util::SafeService::start
    at coherence::net::DefaultConfigurableCacheFactory::configureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureRemoteCache
    at coherence::net::DefaultConfigurableCacheFactory::configureCache
    at coherence::net::DefaultConfigurableCacheFactory::ensureCache
    at coherence::net::CacheFactory::getCache
    at unsigned __int64 coherence::lang::class_spec<class coherence::lang::Managed<class ContactId>,class coherence::lang::extends<class coherence::lang::Object,class coherence::lang::Void<class coherence::lang::Object> >,class coherence::lang::implements<void,void,void,void,void,void,void,void,void,void,void,void,void,void,void,void> >::sizeOf(bool)
    at _onexit
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at BaseThreadInitThunk
    at RtlInitializeExceptionChain
    at RtlInitializeExceptionChain
    on thread "main"
Caused by: coherence::net::messaging::ConnectionException: coherence::component::util::TcpInitiator::TcpConnection@029EAD78{Id=NULL, Open=1, LocalAddress=NULL,
RemoteAddress=10.242.152.242/10.242.152.242:8088}: socket disconnect
    at class coherence::lang::TypedHandle<class coherence::net::messaging::Response> __thiscall coherence::component::net::extend::AbstractPofRequest::Status::g
etResponse(void)(AbstractPofRequest.cpp:203)
    at coherence::component::net::extend::AbstractPofRequest::Status::getResponse
    at coherence::component::net::extend::AbstractPofRequest::Status::waitForResponse
    at coherence::component::util::Initiator::openConnection
    at coherence::component::net::extend::PofConnection::open
    at coherence::component::util::TcpInitiator::openConnection
    at coherence::component::util::Initiator::ensureConnection
    at coherence::component::net::extend::RemoteCacheService::openChannel
    at coherence::component::net::extend::RemoteService::doStart
    at coherence::component::net::extend::RemoteService::start
    at coherence::component::util::SafeService::startService
    at coherence::component::util::SafeService::restartService
    at coherence::component::util::SafeService::ensureRunningServiceInternal
    at coherence::component::util::SafeService::start
    at coherence::net::DefaultConfigurableCacheFactory::configureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureService
    at coherence::net::DefaultConfigurableCacheFactory::ensureRemoteCache
    at coherence::net::DefaultConfigurableCacheFactory::configureCache
    at coherence::net::DefaultConfigurableCacheFactory::ensureCache
    at coherence::net::CacheFactory::getCache
    at unsigned __int64 coherence::lang::class_spec<class coherence::lang::Managed<class ContactId>,class coherence::lang::extends<class coherence::lang::Object
,class coherence::lang::Void<class coherence::lang::Object> >,class coherence::lang::implements<void,void,void,void,void,void,void,void,void,void,void,void,void
,void,void,void> >::sizeOf(bool)
    at _onexit
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at class coherence::util::Hashtable * coherence::lang::factory<class coherence::util::Hashtable>::create(void)
    at BaseThreadInitThunk
    at RtlInitializeExceptionChain
    at RtlInitializeExceptionChain
    on thread "main"
Caused by: coherence::io::IOException: socket disconnect
    at unsigned int __thiscall coherence::net::Socket::readInternal(unsigned char *,unsigned int)(Socket.cpp:333)
    at coherence::net::Socket::readInternal
    at coherence::net::Socket::SocketInput::read
    at coherence::io::BufferedInputStream::fillBuffer
    at coherence::io::BufferedInputStream::read
    at coherence::component::util::TcpInitiator::readMessageLength
    at coherence::component::util::TcpInitiator::TcpConnection::TcpReader::onNotify
    at coherence::component::util::Daemon::run
    at coherence::lang::Thread::run
    on thread "ExtendTcpCacheService:coherence::component::util::TcpInitiator:coherence::component::util::TcpInitiator::TcpConnection::TcpReader"

We are facing same issue.    Could you please provide us any working .Net sample code for the version 12.1.2.0.
<ssl>
              <protocol>Tls</protocol>
              <local-certificates>
                <certificate>
                  <url>c:\Cert\</url>
                  <password>password</password>
                  <flags>DefaultKeySet</flags>
                </certificate>
              </local-certificates>
            </ssl>
thanks
Bala

LMS 4.2 – Missing messages in Remote Syslog Collector

Remote syslog Collector are dropping syslog messages - randomly. During analyzing we found out that syslog messages are stored in RSAC in file: /var/log/syslog_info
According to information from /etc/rsyslog.conf are the same syslog messages stored again in other files: /var/log/messages, /var/log/boot.log
In every file are missing the same messages. Load of RSAC and physical server is very low. When we send messages to more syslog servers (for example to other debian server in the same or different vlan) in the same physical server in vmware, we always receive every message.
We are using LMS 4.2.3 (Soft appliance) and for syslog messages RSAC 5.2 (linux in vmware). We receive approximately 200-300k syslog messages per day and RSAC drop approximately 100k.
Please what we have to change to receive all messages?
Why RSAC store the same messages more times?
Thanks
Milos

I think this should change what you want - if not, revert it to the default:
for security, make a backup of the following file and open it in a text editor:
NMSROOT\MDC\tomcat\webapps\rme\WEB-INF\classes\com\cisco\nm\rmeng\csc\data\Collector.properties
change the following to a value that might fit your needs but be careful this can affect system performance:
    QUEUE_CAPACITY=100000
save the file and restart the following syslog processes:
in a DOS box check the status of the following processes (they should be started) and restart them:
    pdshow SyslogAnalyzer SyslogCollector
    pdterm SyslogAnalyzer SyslogCollector
    pdexec SyslogAnalyzer SyslogCollector
    pdshow SyslogAnalyzer SyslogCollector
now, try to re-run your report.

DirectAccess multisite on Server 2012 R2: 'The remote access configuration task (raconfigtask) in Windows Task Scheduler cannot be disabled"

Dear all,
I'm an experiencing an issue when configuring 2012 R2 DirectAccess multisite.
The initial configuration of the first site in a multisite setup works fine, however when i try to add ANY other server on another site, i see the below screenshot, the full text of which is: "The remote access configuration task (raconfigtask) in Windows
Task Scheduler cannot be disabled" while the entry point is added.
THere are no logged events on the remote server, but on the controlling server i see this in the event log:
Log Name: Microsoft-Windows-TaskScheduler/Operational
Source: Microsoft-Windows-TaskScheduler
Date: 10/15/2014 12:55:58 AM
Event ID: 140
Task Category: Task registration updated
Level: Information
Keywords:
User: SYSTEM
Computer: WWCLORAS01.apco.net
Description:
User "S-1-5-18" updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
<EventID>140</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>140</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
<EventRecordID>1738</EventRecordID>
<Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
<Execution ProcessID="840" ThreadID="3852" />
<Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
<Computer>WWCLORAS01.apco.net</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="TaskUpdated">
<Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
<Data Name="UserName">S-1-5-18</Data>
</EventData>
</Event>Log Name: Microsoft-Windows-TaskScheduler/Operational
Source: Microsoft-Windows-TaskScheduler
Date: 10/15/2014 12:55:58 AM
Event ID: 140
Task Category: Task registration updated
Level: Information
Keywords:
User: SYSTEM
Computer: WWCLORAS01.apco.net
Description:
User "S-1-5-18" updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
<EventID>140</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>140</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
<EventRecordID>1738</EventRecordID>
<Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
<Execution ProcessID="840" ThreadID="3852" />
<Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
<Computer>WWCLORAS01.apco.net</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="TaskUpdated">
<Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
<Data Name="UserName">S-1-5-18</Data>
</EventData>
</Event>
And this in the taskscheduler:
Log Name: Microsoft-Windows-TaskScheduler/Operational
Source: Microsoft-Windows-TaskScheduler
Date: 10/15/2014 12:55:58 AM
Event ID: 140
Task Category: Task registration updated
Level: Information
Keywords:
User: SYSTEM
Computer: WWCLORAS01.apco.net
Description:
User "S-1-5-18" updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
<EventID>140</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>140</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
<EventRecordID>1738</EventRecordID>
<Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
<Execution ProcessID="840" ThreadID="3852" />
<Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
<Computer>WWCLORAS01.apco.net</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="TaskUpdated">
<Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
<Data Name="UserName">S-1-5-18</Data>
</EventData>
</Event>
Any ideas what might be causing this? All servers are in the same domain, firewalls don't seem to be dropping anything, SCCM client is installed, but thats it.
Appreciate any feedback.
Jim

Dear all,
I'm an experiencing an issue when configuring 2012 R2 DirectAccess multisite.
The initial configuration of the first site in a multisite setup works fine, however when i try to add ANY other server on another site, i see the below screenshot, the full text of which is: "The remote access configuration task (raconfigtask) in Windows
Task Scheduler cannot be disabled" while the entry point is added.
THere are no logged events on the remote server, but on the controlling server i see this in the event log:
Log Name: Microsoft-Windows-TaskScheduler/Operational
Source: Microsoft-Windows-TaskScheduler
Date: 10/15/2014 12:55:58 AM
Event ID: 140
Task Category: Task registration updated
Level: Information
Keywords:
User: SYSTEM
Computer: WWCLORAS01.apco.net
Description:
User "S-1-5-18" updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
<EventID>140</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>140</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
<EventRecordID>1738</EventRecordID>
<Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
<Execution ProcessID="840" ThreadID="3852" />
<Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
<Computer>WWCLORAS01.apco.net</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="TaskUpdated">
<Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
<Data Name="UserName">S-1-5-18</Data>
</EventData>
</Event>Log Name: Microsoft-Windows-TaskScheduler/Operational
Source: Microsoft-Windows-TaskScheduler
Date: 10/15/2014 12:55:58 AM
Event ID: 140
Task Category: Task registration updated
Level: Information
Keywords:
User: SYSTEM
Computer: WWCLORAS01.apco.net
Description:
User "S-1-5-18" updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
<EventID>140</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>140</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
<EventRecordID>1738</EventRecordID>
<Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
<Execution ProcessID="840" ThreadID="3852" />
<Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
<Computer>WWCLORAS01.apco.net</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="TaskUpdated">
<Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
<Data Name="UserName">S-1-5-18</Data>
</EventData>
</Event>
And this in the taskscheduler:
Log Name: Microsoft-Windows-TaskScheduler/Operational
Source: Microsoft-Windows-TaskScheduler
Date: 10/15/2014 12:55:58 AM
Event ID: 140
Task Category: Task registration updated
Level: Information
Keywords:
User: SYSTEM
Computer: WWCLORAS01.apco.net
Description:
User "S-1-5-18" updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
<EventID>140</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>140</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
<EventRecordID>1738</EventRecordID>
<Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
<Execution ProcessID="840" ThreadID="3852" />
<Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
<Computer>WWCLORAS01.apco.net</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="TaskUpdated">
<Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
<Data Name="UserName">S-1-5-18</Data>
</EventData>
</Event>
Any ideas what might be causing this? All servers are in the same domain, firewalls don't seem to be dropping anything, SCCM client is installed, but thats it.
Appreciate any feedback.
Jim

GUI log reader and syslog configurator

I'm a bit new to this, but can anyone suggest or recommend a GUI syslog log reader and also does anyone know if there is a GUI syslog configurator? It would be great to just have a GUI application that I can configure my syslog.conf file

for a gui log reader. see the Console.app under Applications/Utilites folder.
it will read several log files that are on the system.

Integrate Remote Syslog Collector with LMS 4.1

We have LMS 4.1 in our network. We had recently installed Remote Syslog Collector on a new Server to collect logs from all the devices. How can we integrate the Remote Syslog Collector with the LMS Server?
Thanks in Advance.

You simply have to subscribe the IP address of the Remote Syslog Collector in Ciscowork LMS server under :
Admin > Collection Settings > Syslog > Syslog Collector Status
Once it is subscribed, it should start working, simialar to how it works when Syslog Collector is Local on LMS server.
For more details see docuement :
http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.1/install/guide/appendc.html#wp1049873
-Thanks

Oracle 11.x log to remote syslog

Hello,
We are running Oracle 11.2.x DB on Solaris platform. Looking for a way to see if I can send alert log and listener log to a remote syslog server?
I know there are some other methods like Epilog and some other scripts that could be used, but wondering if there is a "built-in" method to accomplish this?
Thank you,

I am reasonably certain that there is no way to do this with standard DB facilities (that parameter Sybrand refers to is not relevant).
You can write your own pl/sql routines: perhaps a scheduled job that queries v$diag_alert_ext. Or you could go the external table route to read the logs. But almost certainly, I think you need to rely on external utilities to do this.
Edited by: JohnWatson on Apr 3, 2013 5:30 PM
And I should have added: you could of course buy the Audit Vault. But that is a non-trivial installation.

Confusing ACS 5.4 Alarm - no remote repository configured

The following message from ACS 5.4.0.46 is confusing me:
"Configure Remote Repository under Purge Configuration which is used to take a backup of data before purge."
cause it is configured:
and it also seems to work cause I got also messages that the purge is beginning and that it was successful.
What is the problem here?

I had the same problem, ACS 5.4 with latest patch 6 installed. I had to figure this out by myself and the solution was pretty simple.
Make sure you configure incremental backup before 4 AM as database purge is run every night at 4 AM. I configured it at 3 AM. Well, after you configure this via GUI you need to login CLI and stop/start Job Manager process:
# acs stop view-jobmanager
# acs start view-jobmanager
After that I got rid of those error messages and backups and database purges are working smoothly.
Cheers,
Kari

Remote Service - Configuring Destination - Scope attribute

I want to clarify my understanding that destination of Remoting Service if configured as "request" scope is safe to use in load balancer (having no session stickiness) with multiple web servers. Pls. note that there is no state maintained at server side for the calls.
<service id="remoting-service"
    class="flex.messaging.services.RemotingService">
    <destination id="restaurant">
        <properties>
            <source>samples.restaurant.RestaurantService</source>
            <scope>request</scope>
        </properties>
    </destination>
</service>
This post is related: http://forums.adobe.com/message/2245383#2245383
-Amit

Here's my setup:
Jar located at:
C:\lcds\tomcat\webapps\Alerts\WEB-INF\lib\CliqAlert.jar
Remote-Config file here:
C:\lcds\tomcat\webapps\Alerts\WEB-INF\flex\remoting-config.xml
Service definition:
<destination id="AlertService">
<properties>
<source>com.company.cliq.alert.service.AlertServiceImpl</source>
<scope>application</scope>
        </properties>
</destination>
Navigating to class from Jar file:
C:\lcds\tomcat\webapps\Alerts\WEB-INF\lib\CliqAlert.jar\com\company\cliq\alert\service\Ale rtServiceImpl.class

Redundant Remote Manager configuration

Hi all,
I'm looking for a way to configure OIM to use multiple remote managers for the same IT Resource. So two identical remote managers on two different machine having the same scripts and configuration.
Can't seem to find the right configuration option.

You need to create a load balanced address for your remote manager and use that in your remote manager it resources.
-Kevin

Using server assistant to remotely install/configure Leopard.

As I don't have a graphics card in my Xserver, I need to configure Leopard remotely.
I already installed Leopard Server using Target Disk Mode, but I can't find a way to configure it.

You should just be able to run Server Assistant on another Mac on the local network.
It should reach out to find the server and allow you to configure it over the network.
Are you saying you've tried that and it's not working?

Recommended hardware for new remote office configuration

Hello I'm looking for anyone who can provide hardware recommendations to me for networking two offices. Have one host location and one small remote location with about three users and I want to create a site to site VPN over a cable connection and still have the security and performance in place. I'm no networking guru so I'm looking for a router/switch/firewall that is relatively simple to configure yet has the security I need for both locations. Any assistance would be greatly appreciated.
Sent from Cisco Technical Support iPhone App

I would have choose SA520 or SA540. SA520 even have a wireless feature
Well, for ASA/PIX, you can refer to VPN Tunnel ASDM Configuration for both ASA and PIX in this link http://www.cisco.com/en/US/products/ps5855/products_configuration_example09186a0080a9a7a3.shtml
Do note that in the guide, the S2S VPN configuration is between PIX/ASA and Cisco Router. You can replace the procedure in Cisco Router with the procedure from PIX/ASA using the given value in Cisco Router.
Dandy

UC540 Remote Teleworker Configuration

Hello All,
I am working on setting up an SPA508G for a user outside of the office. I am unsure how to go about this and can find nothing in any documentation to point me in the right direction.
Obviously, I will need to set the phone as a teleworker phone in the Users and Phones section and I assume I will need to setup a "remote user" as well, however when I attempt to create a remote user in the web based administration section it asks me their location based on an ID or abbreviation. I am not sure what I am supposed to put here and I know there have to be more steps involved.
Thanks in advance for your help,
Corey

Corey Earl,
I am assuming you are CCA compliant so I will proceed from that perspective.
It it sounds as if you will have to change the profile of your SPA525G2 as it seems it is being used by another user. To do this I recommend taking both the SPA525G2 and the SPA508 and disconnect it from the network. This way you will be able to edit the MAC address fields and modify the names in the profile to the users you will want them to be. However the only draw back is you will not be able to change the Username fields as that is linked to the CUE. If that does bother you, you can do the above otherwise you will have to delete the profiles and recreate them. (Fyi if you go the recreate route you may lose the VM associated to the profiles).
You will then need to set up your SSL VPN server (in case it is not set up). Go to Configure > Security > SSL VPN. Fill in the information. If you need a bit more guidance here is the link to the CCA admin guide: http://www.cisco.com/c/dam/en/us/td/docs/net_mgmt/cisco_configuration_assistant/version3_2_1/administration_guide/cca_sbcs_admin_guide.pdf
Search for SSL VPN section it will give you an overview. As far as I recall you will need to upload the anyconnect file: anyconnect-dart-win-2.5.6005-k9.pkg onto the flash. Though I couldn't find a link to this anymore so you may need to contact support to get this file.
After you have the users modified/recreated and the SSL VPN server done then go to Home > Phone VPN Setup Wizard. Run the VPN wizard and the SPA525G2 should populate in the list. You will create the profile, (or re-enter the profile you created when you set up the SSL VPN server) there for the VPN server IP, and user credentials for the authentication the phone will be configured with. (The SPA525G2 will need to be onsite for this part to work). Otherwise you will have to manually configure the SPA525G2.
Regards,
Michael D.

Remote syslog configuration

Similar Messages

Maybe you are looking for