Log Server for vro switching in linux

Set vi/etc/sysconfig/syslog in linux to change SYSLOGD_OPTIONS = "-m 0" to SYSLOGD_OPTIONS = "-r-m 0 "//- r writes data from the remote host-m 0 sables 'mark' messagesvi/etc/syslog. add the following content to the conf file to record all logs with the device number local4 (the default device Number of the PIX) to/var/log/router. log # Save pix messages all to router. log local4. */var/log/router. log records all logs whose device number is local5 (specified by info-center loghost-ip-addr facility local-number in S8016) to/var/log/router. log # Save S8016 messages all to S8016.log local5. */var/log/S8016.log to generate an empty log file touch/var/log/router. logtouch/var/log/S8016.log, restart syslog, and then OK/etc/rc. d/init. d/syslog restart do not forget to Set firewall rules, only allow your device to send to udp/514 (the default UDP port is 514, the default tcp port is 146 to avoid excessive logs, configure log rotation (man logrotate to view detailed help information) vi/etc/logrotate. add the following content to conf # system-specific logs may be also be configured here. /var/log/router. log (rotate 2}/var/log/S8016.log {we Ekly // rotate 4 times a week // 4 times a week} configure crontab to back up logs, for example, back up logs by date. if there are many network devices, you can configure similar devices as the same device number. Example: more switch. log | grep X. x. x. X // It is very important to view the logs of a device and review system events. If you only record system events as logs and do not view them, it will not help. You can use webadmin to manage and view logs, use logchek to Automatically Check log files, remove normal log information, and retain problematic logs, then, email the information to the system administrator. (Will be supplemented later) configure the configuration of the PIX logging on the network device // open the log logging host [if_name] ip_address [protocol/port] // specify the log host instance: logging host log 133.3.3.2 logging trap level // specify the log message level (0: Emergency (Emergencies) 1: Alarm (Alerts) 2: severe (Critical) 3: Error (Errors) 4: Warning 5: Notifications 6: Informational 7: Debugging logging trap 7 // set the Debugging information to Debug level, record the FTP command and www url. You can use the logging facility command to change the device number. By default, the PIX is local4 (20) Huawei S8016 configuration (VRP (R) Software, Version 3.10 (NSSA ), RELEASE 5331) huawei S8016 new command line Setting log server info-center enable // Open Information center inf-center loghost host-ip-addr channel 2 facility local-number set log host ip address info-center logging host-ip-addr set the information channel of the log host info-center host-ip-addr channel {channel-number | channel-name} set the logging tool set logging host host-ip-addr facility local-number cancel output information to the log host undo info-center loghost host-ip-addr huwei S3026 configuration (VRP (tm) software, Version 3.10) logging onset logging host 133.3.3.2 channel 2 language chinese facility local1Cisco 7505 configuration logging 133.3.3.2 logging on logging trap 6 logging facility local0