Cisco MCS-7825-H3-IPC1 Service Guide - Page 793

Chapter 7 Cisco Management Information Base CISCO-SYSLOG-MIB Collect the following logs and information: • Set the detailed trace for CiscoSyslogAgent with the set trace enable Detailed syslogmib command. • Restart the Cisco Syslog Agent service from the serviceability Web window Tools > Control Center - Network Services and wait for some time. • Collect the Cisco Syslog Agent trace files by: - Using the file get activelog cm/trace/syslogmib/sdi/ command. - Using RTMT Trace & Log Central > Collect Files > Cisco CallManager SNMP Service > Cisco Syslog Agent. • Once the logs are collected, reset the trace settings by using the set trace disable syslogmib command. Frequently Asked Questions How is a remote syslog server configured? You can configure a remote syslog server from Cisco Unified Communications Manager Administration > System > Enterprise Parameters > plus the following: • Remote Syslog Server Name-You can enter the name or IP address of the remote Syslog server that you want to use to accept Syslog messages. If the server name is not specified, Cisco Unified Serviceability does not send the Syslog messages.Do not specify a Cisco Unified Communications Manager server as the destination because the Cisco Unified Communications Manager server does not accept Syslog messages from another server. - Maximum length: 255 - Allowed values: Provide a valid remote syslog server name that comprises (A-Z,a-z,0-9,.,-) • Syslog Severity For Remote Syslog messages-You can select the desired Syslog messages severity for remote syslog server. The system sends all the syslog messages with selected or higher severity levels to the remote syslog. If the remote server name is not specified, Cisco Unified Serviceability does not send the Syslog messages. How is a remote syslog server configured to redirect alarms specific to a particular service? You can configure a remote syslog server from Cisco Unified Serviceability window > Alarm > Configuration: • Select the Service Group and Service from drop down list for the particular server. • Enable Alarm for Remote Syslogs and set the desired Alarm Event Level. Enter the remote syslog server name or IP address for redirection. • The system sends all the syslog messages for the particular service with selected or higher severity levels to the remote syslog. How are messages captured in the configured remote server? Kiwi Syslog Daemon is a freeware tool which can be installed in the remote server to capture the syslog messages. What happens if the same remote server is configured from Enterprise Parameters and Alarm Configuration page? • Enterprise parameters configuration of remote syslog redirects all the syslog messages which have severity equal to or higher than configured severity. There is no classification done for different types of syslog messages. It is just a plain redirection of all the syslog messages generated. • Alarm configuration sends the specific service syslog messages to the configured remote server based on the severity. OL-22523-01 Cisco Unified Communications Manager Managed Services Guide 7-151