Enable send logs from a Cisco Switch:
1. Check the config
show run | i logging
2. Configure the switch
conf t
logging host 11.11.11.11
end
end
conf t
logging console debugging
logging monitor debugging
logging buffer debugging
end
wr
conf t
archive
log config
logging enable
notify syslog contenttype plaintext
hidekeys
logging on
login block-for 60 attempts 3
within 60
login on-failure log every 1
login on-success log every 1
For Cisco 4500, check:
4500(config)#login on-success
trap every 1
4500(config)#login on-success log
every 1
4500(config)#login on-failure
trap every 1
4500(config)#login on-failure log
every 1
4500(config)#ip ssh logging
events
logging source-interface vlanX
Configure the output source vlan for the logs (Force output from an ip)
logging source-interface vlanX
Others commands
sh logging queue: to check the queue
My syslog server is Kiwi Syslog
sh logging queue: to check the queue
My syslog server is Kiwi Syslog
by GoN | Published: Febrary 9, 2017 | Last Updated:
