topic Problems sending SYSLOG to NETSIGHT in ExtremeCloud IQ- Site Engine Management Center

Problems sending SYSLOG to NETSIGHT

Jairo_Rojas_Her — Mon, 27 Jun 2016 19:04:00 GMT

I have problems with the manager NetSight alarms. Not receiving notifications alerts ELRP, OSPF, EAPS and other events.

This the script configuration over Switch

configure snmpv3 add user netsight authentication md5 F4l4b3114c01 privacy F4l4b3114c01

configure snmpv3 add group netsight_btcol user netsight sec-model usm

configure snmpv3 add access netsight_btcol sec-model usm sec-level priv read-view defaultAdminView write-view defaultAdminView notify-view defaultAdminView

RE: Problems sending SYSLOG to NETSIGHT

Ronald_Dvorak — Mon, 27 Jun 2016 19:27:00 GMT

Here a link how to configure the system to send messages to a syslog server...

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-a-syslog-server/

RE: Problems sending SYSLOG to NETSIGHT

Zdeněk_Pala — Mon, 27 Jun 2016 21:28:00 GMT

The configuration you provided is for SNMP not for syslog.
Based on NetSight version and XOS version you can let NetSight configure the Syslog receiver on XOS switches also with new version of NetSight and new XOS version.

Not sure what version you must have.

Regards

RE: Problems sending SYSLOG to NETSIGHT

Jairo_Rojas_Her — Mon, 27 Jun 2016 21:53:00 GMT

Hi, Zdenek

This is a configuration to SysLog

enable snmp traps
create log filter netsight
create log filter memorybuffer
configure log filter netsight add events cli.logRemoteCmd
configure log filter netsight add events vlan.msgs.portLinkStateUp
configure log filter netsight add events vlan.msgs.portLinkStateDown
configure log filter netsight add events AAA.authPass
configure log filter netsight add events AAA.authFail
configure log filter netsight add events EAPS.TransDmnState
configure log filter netsight add events EAPS.TransPortState
configure log filter netsight add events EAPS.SharedPort.TransSegState
configure log filter netsight add events EAPS.RxPduLinkUp
configure log filter netsight add events EAPS.RxPduLinkDown
configure log filter netsight add events EAPS.SharedPort.PortInfo
configure log filter netsight add events FDB.arpViolation
configure log filter netsight add events VRRP.ExtCfgChng
configure log filter netsight add events VRRP.System.NoIPAddr
configure log filter netsight add events VRRP.StateChng
configure log filter netsight add events DM.Notice
configure syslog add 10.120.11.130:514 vr VR-Default local5
enable log target syslog 10.120.11.130:514 vr VR-Default local5
configure log target syslog 10.120.11.130:514 vr VR-Default local5 filter netsight severity Info
configure log target syslog 10.120.11.130:514 vr VR-Default local5 match Any
configure log target syslog 10.120.11.130:514 vr VR-Default local5 format timestamp seconds date Mmm-dd event-name none host-name tag-name

RE: Problems sending SYSLOG to NETSIGHT

Jairo_Rojas_Her — Mon, 27 Jun 2016 22:01:00 GMT

RE: Problems sending SYSLOG to NETSIGHT

Ronald_Dvorak — Tue, 28 Jun 2016 20:53:00 GMT

Looks like setting "Syslog Receiver Configuration" isn't supported for XOS devices - I've rx the same error for my X440.

You just need the following configuration...

enable syslog
configure syslog add vr local0
configure syslog vr local0 severity info
enable log target syslog : vr local0

configure log target syslog : format timestamp seconds date mm/dd/yyyy host-name tag-id tag-name

My X440 is now sending syslog messages....

false Info --- 06/28/2016 05:44:53 PM 172.24.24.253 --- --- Event --- 06/28/2016 17:44:44 Network Control AAA[1470]: User admin logout from telnet (172.24.24.110)