Viewing Cisco ACL logs

Discussion in 'Cisco' started by K.J. 44, Aug 28, 2006.

  1. K.J. 44

    K.J. 44 Guest

    Where do I view my router's ACL logs? Is there a way to write a script
    to have them sent to a network location (like a directory on my file
    server) so i can view them?

    Thanks.
    K.J. 44, Aug 28, 2006
    #1
    1. Advertising

  2. K.J. 44

    Doan Guest

    On 28 Aug 2006, K.J. 44 wrote:

    > Where do I view my router's ACL logs? Is there a way to write a script
    > to have them sent to a network location (like a directory on my file
    > server) so i can view them?
    >
    > Thanks.
    >

    You can have your router forward the log messages to a syslog server.
    Use 'logging <ip-adddress>'

    Doan
    Doan, Aug 28, 2006
    #2
    1. Advertising

  3. K.J. 44

    BernieM Guest

    "Doan" <> wrote in message
    news:p...
    > On 28 Aug 2006, K.J. 44 wrote:
    >
    >> Where do I view my router's ACL logs? Is there a way to write a script
    >> to have them sent to a network location (like a directory on my file
    >> server) so i can view them?
    >>
    >> Thanks.
    >>

    > You can have your router forward the log messages to a syslog server.
    > Use 'logging <ip-adddress>'
    >
    > Doan
    >


    and to the same location if it's a syslog server using

    "logging facility syslog"

    BernieM
    BernieM, Aug 29, 2006
    #3
  4. K.J. 44

    BernieM Guest

    "BernieM" <> wrote in message
    news:cLRIg.19772$...
    >
    > "Doan" <> wrote in message
    > news:p...
    >> On 28 Aug 2006, K.J. 44 wrote:
    >>
    >>> Where do I view my router's ACL logs? Is there a way to write a script
    >>> to have them sent to a network location (like a directory on my file
    >>> server) so i can view them?
    >>>
    >>> Thanks.
    >>>

    >> You can have your router forward the log messages to a syslog server.
    >> Use 'logging <ip-adddress>'
    >>
    >> Doan
    >>

    >
    > and to the same location if it's a syslog server using
    >
    > "logging facility syslog"
    >
    > BernieM
    >


    what I meant to add was that Doan's example sends snmp-traps.
    BernieM, Aug 29, 2006
    #4
  5. K.J. 44

    BernieM Guest

    "BernieM" <> wrote in message
    news:LMRIg.19773$...
    >
    > "BernieM" <> wrote in message
    > news:cLRIg.19772$...
    >>
    >> "Doan" <> wrote in message
    >> news:p...
    >>> On 28 Aug 2006, K.J. 44 wrote:
    >>>
    >>>> Where do I view my router's ACL logs? Is there a way to write a script
    >>>> to have them sent to a network location (like a directory on my file
    >>>> server) so i can view them?
    >>>>
    >>>> Thanks.
    >>>>
    >>> You can have your router forward the log messages to a syslog server.
    >>> Use 'logging <ip-adddress>'
    >>>
    >>> Doan
    >>>

    >>
    >> and to the same location if it's a syslog server using
    >>
    >> "logging facility syslog"
    >>
    >> BernieM
    >>

    >
    > what I meant to add was that Doan's example sends snmp-traps.
    >


    I was wrong. I now don't understand exactly what "logging facility syslog"
    actually does.

    BernieM
    BernieM, Aug 29, 2006
    #5
  6. K.J. 44

    Guest

    BernieM wrote:
    > "BernieM" <> wrote in message
    > news:LMRIg.19773$...
    > >
    > > "BernieM" <> wrote in message
    > > news:cLRIg.19772$...
    > >>
    > >> "Doan" <> wrote in message
    > >> news:p...
    > >>> On 28 Aug 2006, K.J. 44 wrote:
    > >>>
    > >>>> Where do I view my router's ACL logs? Is there a way to write a script
    > >>>> to have them sent to a network location (like a directory on my file
    > >>>> server) so i can view them?
    > >>>>
    > >>>> Thanks.
    > >>>>
    > >>> You can have your router forward the log messages to a syslog server.
    > >>> Use 'logging <ip-adddress>'
    > >>>
    > >>> Doan
    > >>>
    > >>
    > >> and to the same location if it's a syslog server using
    > >>
    > >> "logging facility syslog"
    > >>
    > >> BernieM
    > >>

    > >
    > > what I meant to add was that Doan's example sends snmp-traps.
    > >

    >
    > I was wrong. I now don't understand exactly what "logging facility syslog"
    > actually does.


    Damn, I was getting excited there, I though that I
    was going to find out something.


    Back to the original question

    >From reading cco :-


    snmp-server enable traps syslog
    - enable the transmission of snmp traps of syslog messages

    Then you can set the level of events that are sent with

    logg history [level]

    Presumably if "log history level" is greater than "logg trap level"
    then since the messages have not been through syslog they won't
    get to the snmp server? Who knows?

    Configuring System Message Logging
    http://www.cisco.com/en/US/products...figuration_guide_chapter09186a00801ce00c.html


    http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a008021de3e.shtml
    The Traps Sent with SNMP-Server Enabled Traps Configured
    , Aug 29, 2006
    #6
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. awallwork at sign gmail dot com

    WinXP Home SP2 Logs on then Logs off

    awallwork at sign gmail dot com, Oct 13, 2004, in forum: Computer Support
    Replies:
    2
    Views:
    1,898
    Andrew
    Oct 16, 2004
  2. awallwork at sign gmail dot com

    Win XP SP2 Logs in then Logs out

    awallwork at sign gmail dot com, Oct 14, 2004, in forum: Computer Support
    Replies:
    2
    Views:
    2,292
    Andrew
    Oct 16, 2004
  3. Andrew

    Win XP SP2 Logs in then Logs out

    Andrew, Oct 16, 2004, in forum: Computer Support
    Replies:
    2
    Views:
    615
    mhicaoidh
    Oct 16, 2004
  4. Andrew
    Replies:
    15
    Views:
    7,059
    Gus Webb
    Oct 19, 2004
  5. Lester Lane

    Logs button not opening Logs GUI

    Lester Lane, Jun 29, 2009, in forum: Cisco
    Replies:
    6
    Views:
    517
    Lester Lane
    Aug 28, 2009
Loading...

Share This Page