[syslog-ng] logging from Cisco

[Bill Nash]

On Wed, 23 May 2007, Bill Nash wrote:

> On Wed, 23 May 2007, Grigoreva, Yelena wrote:
> 
> > I have enabled Cisco logging to my host SUSE 10.2. From the Wireshark tool I can see that I become the syslog messages and then I try to find them somewhere in /var/log/.... but w/t success. ;(
> > 
> > Where are the syslog messages logged from external HW? I have set in my sysconf SYSLOGD_PARAMS="-rx -m 0" to enable external logging, but all the same-no effect.I have created local0, cisco files: I am not sure what file name should I give? where must it be specified?
> > 
> > I will be grateful for any tip :)
> > 
> 
> Check local7. I think that's the default facility for Cisco devices.
> 

Or local4, now that I really think on it. It depends on the type of device 
and which faction of Cisco (or purchased company) wrote the code.

- billn