This may be a problem of somewhat different semantics between Cisco IOS and syslog-ng configuration speak. In IOS logging trap debug says send all messages of priority debug (the lowest possible) and higher to the logging host (10.1.1.91 in this case.) Syslog-ng syntax says if you say priority debug you mean only that priority. I suspect that if you enable yourself on a *test* router and turn on some debugging you will see the messages in the log file. BTW, unless you are attached directly to the router console port, you will need to issue the IOS command term monitor in order to see the debug output locally. Be real careful about debugging a router under a heavy load since it can quickly turn into a self-eating doughnut and disappear into its own hole :( --Dave -----Original Message----- From: syslog-ng-admin@lists.balabit.hu [mailto:syslog-ng-admin@lists.balabit.hu] On Behalf Of Kevin Rothwell Sent: Friday, February 06, 2004 2:03 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng]Syslog-ng, Mysql, and Cisco routers Hello, I have syslog-ng installed on all of my Linux boxes, logging to a mysql database. (This works) I would like to configure one of my Cisco routers to send syslog messages to this database as well. I have modified my syslog-ng.conf file on the mysql database box to include the following lines: Facility filters filter f_cisco { facility(local7) and priority(debug); }; destination d_cisco {file(" file("/var/log/cisco")' }; log { source(net); filter(f_cisco); destination(d_cisco); }; I have issued the following commands on my router: logging 10.1.1.91 logging facility local7 logging trap debug logging on Needless to say, it isn't working. Why else would I be sending this message. Is there anyone logging their Cisco syslog messages to a mysql database? If so, how can I do it on Redhat Linux? Any help would be greatly appreciated. Thanks. Kevin Rothwell _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html --- [This E-mail scanned for viruses by ezaccess.net]