I have been working on forwarding syslogs from my network devices and have run into an issue in XIQ when pushing the configuration change with the Syslog Server Profile. Our netowrk consists of Extreme AP410c APs and Aerohive SR23XXp series switches. The configuration takes with no problems on the AP410c devices.
When updating the switches however, I get a configuration failure, and when looking at the configuration events I see this:
This seems to be caused by incorrect commands being fed to the switches, as neither the 'bootpdhcprelay config flags syslog-rfc5424-format' or the 'syslog enable' commands are valid on the SR23xx series switches. Instead, the command to change the syslog to RFC5424 format should be 'logging protocol 1'
I think the 'syslog enable' command is entirely unneeded, as even with the configuration failure, the switches have been sending logs to my logging server (although in RFC 3164 format).
