{"id":66,"date":"2014-06-22T03:10:48","date_gmt":"2014-06-22T03:10:48","guid":{"rendered":"http:\/\/feralpacket.org\/?p=66"},"modified":"2015-01-03T11:20:18","modified_gmt":"2015-01-03T11:20:18","slug":"v5-written-and-lab-logging-notes","status":"publish","type":"post","link":"https:\/\/feralpacket.org\/?p=66","title":{"rendered":"v5 Written and Lab: Logging Notes"},"content":{"rendered":"

v5 Written: 6.1.c Implement and troubleshoot logging
\n6.1.c [i] Local logging, syslog, debug, conditional debug
\n6.1.c [ii] Timestamps<\/code><\/p>\n

v5 Lab: 5.1.c Implement and troubleshoot logging
\n5.1.c [i] Local logging, syslog, debug, conditional debug
\n5.1.c [ii] Timestamp<\/p>\n

Documents:<\/p>\n

Basic System Management Configuration Guide, Cisco IOS Release 15M&T, Troubleshooting and Fault Management, Logging System Messages, pgs. 107 – 113<\/p>\n

Basic System Management Configuration Guide, Cisco IOS Release 15M&T, Troubleshooting and Fault Management, Enabling Debug Operations, pgs. 120 – 125<\/p>\n

http:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/ios-xml\/ios\/bsm\/configuration\/15-mt\/bsm-15-mt-book.html<\/p>\n

Catalyst 3750-X and 3560-X Software Configuration Guide, Release 15.0(1)SE, Chapter 34: Understanding System Message Logging, pgs. 34-1 to 34-17<\/p>\n

Catalyst 3750-X and 3560-X Software Configuration Guide, Release 15.0(1)SE,
\nChapter 52: Troubleshooting, Using Debug Commands, pgs. 52-20 to 52-22<\/p>\n

http:\/\/www.cisco.com\/c\/en\/us\/td\/docs\/switches\/lan\/catalyst3750x_3560x\/software\/release\/15-0_1_se\/configuration\/guide\/3750xcg.html<\/p>\n

Books:<\/p>\n

CCIE Routing and Switching Exam Certification Guide 4th Ed; Chapter 5: IP Services, Syslog, pgs. 159 – 160<\/p>\n

Routing TCP \/ IP Volume II; Chapter 9 Router Management, Logging, Syslog, pgs. 744 – 750f<\/p>\n

Router-Bits Handbook; Syslog, pgs. 326 – 327<\/p>\n

INE:<\/p>\n

INE R&S Workbook Vol I
\n– System Management
\n– 12.2 – System Management Logging
\n– 12.3 – Syslog Logging
\n– 12.4 – Logging Counging and Timestamps
\n– 12.5 – Logging to Flash Memory
\n– 12.6 – Configuration Change Notification and Logging
\n– 12.8 – Logging with Access-Lists<\/p>\n

RFC 5424 – The Syslog Protocol<\/p>\n

Uses UDP port 514<\/p>\n

Logging options:
\n– Internal buffer: allocates a small part of memory to log messages
\n– Syslog: send messages to an external device for storing<\/p>\n

Tip: Make sure the device is configured for the right date, time, and timezone<\/p>\n

Example:<\/p>\n

conf t
\nservice timestamps log datetime msec localtime show-timezone
\nservice timestamps debug datetime msec localtime show-timezones
\nlogging
\nlogging trap 6<\/p>\n

Message levels:
\n– Emergancy 0
\n– Alert 1
\n– Critical 2
\n– Error 3
\n– Warning 4
\n– Notice 5
\n– Informational 6
\n– Debug 7<\/p>\n

logging facility
\n– local 0 – 7<\/p>\n

local 7 is the default facility<\/p>\n

show logging<\/p>\n

Warning: the debug process is assigned a high CPU priority<\/p>\n

By default, Cisco routers and switches do not log events to nonvolatile memory;
\n– can be configured to do so
\n– logging buffered<\/p>\n

Examples:<\/p>\n

logging on
\nlogging buffered 8192 debugging
\nlogging console debugging
\nlogging rate-limit console all 1
\nlogging monitor informational<\/p>\n

line con 0
\nlogging sysnchronous<\/p>\n

logging queue-limit trap 256
\nlogging origin-id string ROUTER4
\nlogging facility local1
\nlogging trap notifications
\nlogging source-interface lo0
\nlogging host 1.1.1.1 transport tcp port 500<\/p>\n

service timestamps debug uptime
\nservice timestamps log uptime
\nservice sequence-numbers
\nlogging count<\/p>\n

show logging
\nshow logging count<\/p>\n

#mkdir flash0:\/var
\n#mkdir flash0:\/var\/log
\n#conf t<\/p>\n

logging file flash0:\/var\/log\/syslog 32768 notifications
\nlogging on<\/p>\n

In IOS 15 M&T, logging to flash changed to:<\/p>\n

logging persistent url flash0:\/var\/log\/syslog size 32768 filesize 32768<\/p>\n

show logging
\nmore flash0:\/var\/log\/syslog<\/p>\n

archive
\nlog config
\nlogging enable
\nlogging size 1000
\nnotify syslog
\nhidekeys<\/p>\n

show archive log config all
\nshow archive log config statistics
\nshow archive log config all provisioning<\/p>\n

ip access-list extended LOGGING
\npermit udp any any eq rip log-input
\npermit ip any any<\/p>\n

int fa0\/1
\nip access-group LOGGING in<\/p>\n

ip access-list logging interval 10
\nip access-list lop-update threshold 2<\/p>\n

System process –> Logger
\n– Looks for messages (debug, error, informational) queued via the kernel by other processes and outputs them to the console, and, optionally, to a remote syslog server;<\/p>\n","protected":false},"excerpt":{"rendered":"

v5 Written: 6.1.c Implement and troubleshoot logging 6.1.c [i] Local logging, syslog, debug, conditional debug 6.1.c [ii] Timestamps v5 Lab: 5.1.c Implement and troubleshoot logging 5.1.c [i] Local logging, syslog, debug, conditional debug 5.1.c [ii] Timestamp Documents: Basic System Management Configuration Guide, Cisco IOS Release 15M&T, Troubleshooting and Fault Management, Logging System Messages, pgs. 107 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[30,20,11],"class_list":["post-66","post","type-post","status-publish","format-standard","hentry","category-ccie","tag-ccie","tag-logging","tag-route-switch"],"_links":{"self":[{"href":"https:\/\/feralpacket.org\/index.php?rest_route=\/wp\/v2\/posts\/66","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/feralpacket.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/feralpacket.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/feralpacket.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/feralpacket.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=66"}],"version-history":[{"count":2,"href":"https:\/\/feralpacket.org\/index.php?rest_route=\/wp\/v2\/posts\/66\/revisions"}],"predecessor-version":[{"id":232,"href":"https:\/\/feralpacket.org\/index.php?rest_route=\/wp\/v2\/posts\/66\/revisions\/232"}],"wp:attachment":[{"href":"https:\/\/feralpacket.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=66"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/feralpacket.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=66"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/feralpacket.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=66"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}