Syslog display wrong information

[JohanHendrikx]

I have configured my switch to send messages to the syslog server (XMC).

configure syslog add :514 vr VR-Default local0
configure log target syslog :514 vr VR-Default local0 from
enable log target syslog :514 vr VR-Default local0
configure log target syslog :514 vr VR-Default local0 filter DefaultFilter severity Info
configure log target syslog :514 vr VR-Default local0 match Any
configure log target syslog :514 vr VR-Default local0 format timestamp seconds date dd-mm-yyyy event-name none tag-id tag-name

The information I see in syslog is see screencopy

I see the wrong info at source , client an the information isn't right (starts with minutes and seconds).

[JohanHendrikx]

Logging from syslog:

How come ther is a difference in format ??

EWC:

<6>Jul 27 15:25:19 10.2.112.3(10.2.112.3) events: Radius Client Radius Response: Accepted: UserID:48:43:7C:2A:DB:3C, Client MAC:[48:43:7C:2A:DB:3C] 3
<6>Jul 27 15:25:19 10.2.112.3(10.2.112.3) events: Radius Client RADIUS server authenticated login (Access Accepted). 3
<6>Jul 27 15:25:19 10.2.112.3(10.2.112.3) dhcpd: DHCPREQUEST for 10.254.16.11 from 48:43:7c:2a:db:3c via csi6

Switch: (firm. 16.1.2.14)

<5>Jul 27 15:25:55 27-07-2018(10.2.112.209) 15:21:31 vlan.ms[1476]: Port 5 link down
<5>Jul 27 15:26:24 27-07-2018(10.2.112.209) 15:22:01 vlan.ms[1476]: Port 5 link down
<5>Jul 27 15:26:36 27-07-2018(10.2.112.209) 15:22:12 vlan.ms[1476]: Port 5 link down

[JohanHendrikx]

We just finished changing hardware to G2 switches and I ve migrate XMC from windows to an apliance.

Firmware is 22.4.1.4
.
I don't use a syslog proxy

Messages from EWC looks oke

[Zdeněk_Pala]

Is the issue present also for new messages comming? Do you have kind of syslog proxy/forward between your switch and XMC?

[JohanHendrikx]

nop. did not help for the syslog messages that XMC receive from switches.

[Zdeněk_Pala]

Not sure if NetSight is the right setting for your deployment. It may be Ubuntu. I am not sure if restart is required.