Problems sending SYSLOG to NETSIGHT

  • 0
  • 1
  • Problem
  • Updated 2 years ago
  • Solved
I have problems with the manager NetSight alarms. Not receiving notifications alerts ELRP, OSPF, EAPS and other events.

This the script configuration over Switch

configure snmpv3 add user netsight authentication md5 F4l4b3114c01 privacy F4l4b3114c01

configure snmpv3 add group netsight_btcol user netsight sec-model usm

configure snmpv3 add access netsight_btcol sec-model usm sec-level priv read-view defaultAdminView write-view defaultAdminView notify-view defaultAdminView

Photo of Jairo Rojas Herrera

Jairo Rojas Herrera

  • 1,452 Points 1k badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 50,154 Points 50k badge 2x thumb
Here a link how to configure the system to send messages to a syslog server...

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-a-syslog-server/
Photo of Pala, Zdenek

Pala, Zdenek, Employee

  • 9,854 Points 5k badge 2x thumb
The configuration you provided is for SNMP not for syslog.
Based on NetSight version and XOS version you can let NetSight configure the Syslog receiver on XOS switches also with new version of NetSight and new XOS version.

Not sure what version you must have.

Regards
Photo of Jairo Rojas Herrera

Jairo Rojas Herrera

  • 1,452 Points 1k badge 2x thumb
Hi, Zdenek

This is a configuration to SysLog

enable snmp traps
create log filter netsight
create log filter memorybuffer
configure log filter netsight add events cli.logRemoteCmd
configure log filter netsight add events vlan.msgs.portLinkStateUp
configure log filter netsight add events vlan.msgs.portLinkStateDown
configure log filter netsight add events AAA.authPass
configure log filter netsight add events AAA.authFail
configure log filter netsight add events EAPS.TransDmnState
configure log filter netsight add events EAPS.TransPortState
configure log filter netsight add events EAPS.SharedPort.TransSegState
configure log filter netsight add events EAPS.RxPduLinkUp
configure log filter netsight add events EAPS.RxPduLinkDown
configure log filter netsight add events EAPS.SharedPort.PortInfo
configure log filter netsight add events FDB.arpViolation
configure log filter netsight add events VRRP.ExtCfgChng
configure log filter netsight add events VRRP.System.NoIPAddr
configure log filter netsight add events VRRP.StateChng
configure log filter netsight add events DM.Notice
configure syslog add 10.120.11.130:514 vr VR-Default local5
enable log target syslog 10.120.11.130:514 vr VR-Default local5
configure log target syslog 10.120.11.130:514 vr VR-Default local5 filter netsight severity Info
configure log target syslog 10.120.11.130:514 vr VR-Default local5 match Any
configure log target syslog 10.120.11.130:514 vr VR-Default local5 format timestamp seconds date Mmm-dd event-name none host-name tag-name
Photo of Jairo Rojas Herrera

Jairo Rojas Herrera

  • 1,452 Points 1k badge 2x thumb
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 50,154 Points 50k badge 2x thumb
Looks like setting "Syslog Receiver Configuration" isn't supported for XOS devices - I've rx the same error for my X440.

You just need the following configuration...

enable syslog
configure syslog add <ip_address> vr <virtual-router> local0
configure syslog <ip_address> vr <virtual-router> local0 severity info
enable log target syslog <ip_address>:<port> vr <virtual-router> local0

configure log target syslog <ip_address>:<port> format timestamp seconds date mm/dd/yyyy host-name tag-id tag-name


My X440 is now sending syslog messages....

false Info --- 06/28/2016 05:44:53 PM 172.24.24.253 --- --- Event --- 06/28/2016 17:44:44 Network Control AAA[1470]: User admin logout from telnet (172.24.24.110)