SYSLOG: how to handle syslog message from Cisco equipment where program is just a number increasing

Rno · Post by **Rno** » Wed Dec 13, 2023 9:27 am

Hello,
I'm using SYSLOG plug-in to register all the events of my Cisco switch (1200 or so) and a few other server.
But I see that on Cisco the program is just a number who is increasing at each message.

And with that when I try do a search for a real specific message (like my mariadb sysevent) I can't find it in the drop down menu (only 20 or so are displayed).

So how can I make some order on the program record int the DB, to avoid all of this number who mean nothing.

Thanks for any help.

Osiris · Post by **Osiris** » Wed Dec 13, 2023 4:58 pm

Wish I had a Sysco device. Is there a clear mapping of I'd to program? Seems to me maybe a config issue in rsyslog though maybe?

Osiris · Post by **Osiris** » Wed Dec 13, 2023 4:59 pm

If the number is unambiguous, you could edit the mapping tables. Maybe modify the name by a plugin hook.

Rno · Post by **Rno** » Thu Dec 14, 2023 4:20 am

Send me a postal address I will end you a Cisco Switch, not the latest one, but a simple 12 ports than you can use to test it.

Rno · Post by **Rno** » Thu Dec 14, 2023 6:28 am

The number that is send from a switch is just a progressive number, I can't find any relation with a particular event.
But if I take the event from a linux server, the program is really the program name send by the server

Post by **TheWitness** » Fri Dec 22, 2023 12:15 pm

I sent you a PM on this.

Rno · Post by **Rno** » Wed Jan 03, 2024 4:37 am

Hello,
Didn't get any PM on that subject!
Yet

Post by **TheWitness** » Wed Apr 24, 2024 11:31 am

I could not find the pm button are got distracted. Happens a lot as we age.

Cacti

SYSLOG: how to handle syslog message from Cisco equipment where program is just a number increasing

SYSLOG: how to handle syslog message from Cisco equipment where program is just a number increasing

Re: SYSLOG: how to handle syslog message from Cisco equipment where program is just a number increasing

Re: SYSLOG: how to handle syslog message from Cisco equipment where program is just a number increasing

Re: SYSLOG: how to handle syslog message from Cisco equipment where program is just a number increasing

Re: SYSLOG: how to handle syslog message from Cisco equipment where program is just a number increasing

Re: SYSLOG: how to handle syslog message from Cisco equipment where program is just a number increasing

Re: SYSLOG: how to handle syslog message from Cisco equipment where program is just a number increasing

Re: SYSLOG: how to handle syslog message from Cisco equipment where program is just a number increasing

Who is online