Configuration choices for a cisco switch syslog
View PDF | Print View
by: Admin
Total views: 161
Word Count: 319
The events captured in a cisco switch syslog are completely customizable. There are default cisco switch syslog settings that are present when the switch is first activated. Those cisco switch syslog configuration settings are determined and placed by the manufacturer of the device with the intention of providing a well rounded log of activity on the device. You may not want these settings, as they may abandon the creation of entries for events that you consider log worthy, as well as may be creating entries for those that you do not want.
Changes can be made by modifying the cisco switch syslog configuration and designating the levels of logging you wish to take place. The built in logging service that handles the cisco switch syslog is basic in the sense that while it provides the ability to monitor the events generated by the logging service, it does not offer robust features that relate to analysis of the data being presented, nor the ability to archive it for permanent retention. For a switch, it needs to be determined if the cisco switch syslog is of high enough importance to investigate options for permanent archival.
The offloading of the cisco switch syslog to a server capable of interpreting and storing the logs will add the functions that the switch itself is devoid of and allow you to perform an in depth analysis of he log events. While arguably not as critical to security as a firewall or a router log, there is still valuable information stored in the cisco switch syslog. The syslog should be exported if practical to retain it in case the need arises, creating redundancy to prevent loss in case of a failure of the switch or the power to the switch. A cisco switch syslog can be exported to a syslog server for safe offsite storage and analysis.
About the Author
Read on the topic of juniper log analyzer, stop by sysloganalyzer.com.
Rating: Not yet rated