Syslog Monitoring Configuration

Hello could you kindly share your switch model as well as the OS you're on?

You can also send us your system's service tag through DM here https://www.dell.com/community/en/direct-messaging

 

Respectfully,

@DELL-Young E​ 

Switch=A#sh version
Dell Real Time Operating System Software
Dell Operating System Version:  2.0
Dell Application Software Version:  9.11(2.4)
Copyright (c) 1999-2017 by Dell Inc. All Rights Reserved.
Build Time: Fri Aug 18 04:10:12 2017
Build Path: /build/build11/SW/SRC
Dell Networking OS uptime is 6 year(s), 50 week(s), 4 day(s), 8 hour(s), 42 minu                                                                                                                                   te(s)

System image file is "system://A"

System Type: S4820T
Control Processor: Freescale QorIQ P2020 with 2 Gbytes (2147483648 bytes) of mem                                                                                                                                   ory, core(s) 1.

128M bytes of boot flash memory.

  1 52-port GE/TE/FG (SE)
 56 Ten GigabitEthernet/IEEE 802.3 interface(s)
  2 Forty GigabitEthernet/IEEE 802.3 interface(s)
Switch-A#

Hello, 
 
https://www.dell.com/support/product-details/en-ae/product/force10-s4820/drivers

We ask that you configure SNMP server on the switch to transfer to your server(kiwi syslog).

https://dl.dell.com/manuals/all-products/esuprt_networking_int/esuprt_networking_operating_systems/dell-emc-os-9_white-papers20_en-us.pdf

 

https://www.dell.com/support/product-details/en-ae/product/force10-s4820/drivers
Up to 9.14.1.14v is supported only on S4820T.

 

 

Let us know if you have any further questions.
https://www.dell.com/community/en/direct-messaging

Respectfully,

Hello,

 

The Syntax of the commands is a little different in a few of them.

For example “logging 192.168.x.x” instead of “logging host 192.168.x.x”

 

You can see each available OS9 syslog command starting from page 1549 of this document:

Dell Command Line Reference Guide for the S4048–ON System 9.14.2.5

https://dl.dell.com/topicspdf/dell-emc-os-9_users-guide20_en-us.pdf

 

Here is from the lab:

S4820T-P21(conf)#logging on

S4820T-P21(conf)#logging 192.168.10.10

S4820T-P21(conf)#logging trap notifications

S4820T-P21(conf)#logging monitor debugging

 

Also on the switch if you put “?” after logging you can see all available commands:

S4820T-P21(conf)#logging ?

buffered               Set buffered logging parameters

console               Set console logging level

coredump             Coredump logging

disable-syslog       Disable syslog messages

extended             Extended logging enabled

facility                   Facility parameter for syslog messages

history                 Configure syslog history table

Hostname             Hostname or IPv4/v6 address of the logging host

monitor                 Set terminal line (monitor) logging level

on                         Enable logging to all supported destinations

source-interface   Specify interface for source address in logging

trap                       Set syslog server logging level

version                 Set syslog version

 

Thanks for your response. I will put this on my switch and get back to you. Hopefully it works.

S4820T-P21(conf)#logging on

S4820T-P21(conf)#logging 192.168.10.10

S4820T-P21(conf)#logging trap notifications

S4820T-P21(conf)#logging monitor debugging

@DELL-Charles R​ This didnt work. Came up with this;

Int loop0

Ip address x.x.x.

logging source-interface lo0

logging host 10.123.108.XX

Ojo1219,

 

Were you able to get the syslog monitoring to function correctly? If not then let me know.

 

A couple of things to look at if not would be;

 

Ensure Kiwi is listening on UDP port 514

Confirm that firewall rules allow inbound traffic from the switch’s IP.

Check the Kiwi log viewer for incoming messages from the S4820T.

 

Let me know and we can go from there. 

 

 

Kiwi is listening on UDP port 514

Firewall rules allow inbound traffic from the switch’s IP.

I can't get incoming messages for the Kiwi Log Server from the switch.

Looks like the switch log server configurations need to be properly checked. See below;

Int loop0

Ip address x.x.x.

logging source-interface lo0

logging host 192.168.10.XX

See Kiwi Logserver picture;

 

Hello, Ojo1219

At this point I think it's best that you get remote support from your region support. Could you kindly raise an official ticket through https://www.dell.com/support/incidents-online/en-us/contactus/Dynamic?msockid=02eec40b193f61d40967d131182a6092 ?

 

Respectfully,