Disabling the syslog "last message repeated x times" message
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎05-28-2014 12:56 PM
Hello,
I have some Extreme devices sending to a remote syslog server, Is there away to disable the "last message repeated x times" feature and have it send the whole message?
It's messing up our filtering on the remote syslog server
1) it doesn't send the hostname/ip address with the message
2) we don't know which message is getting repeated as we aggregate the syslog messages from all of our devices to provide a live view of the network.
Example of the message we see in our remote syslog is
May 25 23:04:38 exsshd: last message repeated 4 times
May 25 23:42:37 exsshd: last message repeated 4 times
May 26 00:45:19 SNMP.Master: last message repeated 2 times
May 26 01:15:58 exsshd: last message repeated 2 times
Ideally we need it to be the full message each time, eg
May 28 14:27:54 exsshd: SSH connection from sourc #012 has been denied by access-list mgmt_access. Rejecting connection.
Is this possible?
Thanks
I have some Extreme devices sending to a remote syslog server, Is there away to disable the "last message repeated x times" feature and have it send the whole message?
It's messing up our filtering on the remote syslog server
1) it doesn't send the hostname/ip address with the message
2) we don't know which message is getting repeated as we aggregate the syslog messages from all of our devices to provide a live view of the network.
Example of the message we see in our remote syslog is
May 25 23:04:38 exsshd: last message repeated 4 times
May 25 23:42:37 exsshd: last message repeated 4 times
May 26 00:45:19 SNMP.Master: last message repeated 2 times
May 26 01:15:58 exsshd: last message repeated 2 times
Ideally we need it to be the full message each time, eg
May 28 14:27:54 exsshd: SSH connection from sourc #012 has been denied by access-list mgmt_access. Rejecting connection.
Is this possible?
Thanks
5 REPLIES 5
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎05-29-2014 02:55 PM
Report this issue to TAC. It could be software issue.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎05-29-2014 02:43 PM
Extreme X480 and Extreme X670 running ExtremeXOS version 15.4.1.3 v1541b3-patch1-9
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎05-29-2014 02:40 PM
What is the switch model and software version?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
‎05-29-2014 02:39 PM
That is part of the problem, I can see the switch IP for every message apart from the "last message repeated" ones.
All I know is that something repeated somewhere but not which device.
All I know is that something repeated somewhere but not which device.
