Network Management Configuration Example for Ciscoworks LMS Syslog Configuration via GUI

From DocWiki

(Difference between revisions)
Jump to: navigation, search
(Design)
(Design)
(9 intermediate revisions not shown)
Line 5: Line 5:
It has been noticed that the most basic issues seen with the Ciscoworks LMS on its Syslog configuration is because its basic Architecture is not known. This document is intended to give a brief introduction on LMS Syslog Configuration and Architecture for effective Syslog Management using Ciscoworks RME.
It has been noticed that the most basic issues seen with the Ciscoworks LMS on its Syslog configuration is because its basic Architecture is not known. This document is intended to give a brief introduction on LMS Syslog Configuration and Architecture for effective Syslog Management using Ciscoworks RME.
-
==Design==
+
== Design ==
-
<!--Describe any setup details of this configuration and include a topology-->
+
<!--Describe any setup details of this configuration and include a topology-->  
-
[[Image:syslog_cycle.JPG]]
+
[[Image:20111212110605!Syslog_cycle.JPG]]<br>
==Configuration==
==Configuration==
-
I. Following is the Diagram on how CiscoWorks Generate reports for Syslog. RME Syslog reports are not directly fetched from Syslog.log ([[Image:file:///C:/Documents%20and%20Settings/vinarya/Desktop/pckgrme/log.bmp]] ), instead the Syslog messages are being processed and then sent to Syslog DataBase (Syslog.db).
+
I. Following is the Diagram on how CiscoWorks Generate reports for Syslog. RME Syslog reports are not directly fetched from Syslog.log ([[Image:log.JPG]]), instead the Syslog messages are being processed and then sent to Syslog DataBase (Syslog.db).
-
II. Syslog messages are being collected on Syslog.log(or Syslog_info in Solaris) and from here the Syslog Collector([[Image:file:///C:/Documents%20and%20Settings/vinarya/Desktop/pckgrme/engine.bmp]])service receive, filter and forward syslog’s to one or more Syslog Servers (if Remote Syslog, or, RSAC) or to local Server(if Local), thus reducing traffic on the network as well as processing load on the server. So, Syslog Collector is a service that runs independently, listens for syslogs and forwards them to the registered applications after necessary filtering.
+
II. Syslog messages are being collected on Syslog.log (or Syslog_info in Solaris) and from here the Syslog Collector([[Image:engine.JPG]])service receive, filter and forward syslog’s to one or more Syslog Servers (if Remote Syslog, or, RSAC) or to local Server(if Local), thus reducing traffic on the network as well as processing load on the server. So, Syslog Collector is a service that runs independently, listens for syslogs and forwards them to the registered applications after necessary filtering.
-
III. From here the Syslog Analyzer ([[Image:file:///C:/Documents%20and%20Settings/vinarya/Desktop/pckgrme/analyzer.bmp]]) role is started. The Syslog Analyzer receives syslogs from the Common Syslog Collector, invokes automated actions that have been configured for RME, and stores the syslogs in the database. We can use the Syslog Analyzer to generate many useful reports on the syslogs stored in the Syslog Database ([[Image:file:///C:/Documents%20and%20Settings/vinarya/Desktop/pckgrme/db.bmp]]).
+
III. From here the Syslog Analyzer ([[Image:analyzer.JPG]]) role is started. The Syslog Analyzer receives syslogs from the Common Syslog Collector, invokes automated actions that have been configured for RME, and stores the syslogs in the database. We can use the Syslog Analyzer to generate many useful reports on the syslogs stored in the Syslog Database ([[Image:db.JPG]]).
-
All the reports are hence generated from Syslog DB  by RME ([[Image:file:///C:/Documents%20and%20Settings/vinarya/Desktop/pckgrme/gui.bmp]]) and a Syslog message is only entered to Syslog Db once its successfully picked by Syslog Collector and then if the Filter is set to forward it to Syslog Db.
+
All the reports are hence generated from Syslog DB  by RME ([[Image:gui.JPG]]) and a Syslog message is only entered to Syslog Db once its successfully picked by Syslog Collector and then if the Filter is set to forward it to Syslog Db.
Hence after the Syslog Collector is successfully subscribed the highest attention has to paid to the Syslog Filter Settings so that the important syslog messages are not getting filtered out. Also, to view the status of the Common Syslog Collector to which the Syslog Analyzer is subscribed to, follow this procedure:
Hence after the Syslog Collector is successfully subscribed the highest attention has to paid to the Syslog Filter Settings so that the important syslog messages are not getting filtered out. Also, to view the status of the Common Syslog Collector to which the Syslog Analyzer is subscribed to, follow this procedure:
Line 33: Line 33:
You can check if the Syslog Collector is subscribed and is showing the Syslog Messages as forwarded and try generating a 24 hour report from Ciscoworks on Syslog.
You can check if the Syslog Collector is subscribed and is showing the Syslog Messages as forwarded and try generating a 24 hour report from Ciscoworks on Syslog.
-
==Related Information==
+
[http://www.cisco.com/en/US/products/sw/cscowork/ps2425/index.html CiscoWorks LAN Management Solution Introduction]
-
[http://www.cisco.com/en/US/products/sw/cscowork/ps2425/index.html Technical Support & Documentation - Cisco Systems]
+
<!--List links to related information-->
<!--List links to related information-->
-
[[Category:Configuration Examples]]
+
[[Category:Network Management Configuration Examples]]

Revision as of 17:05, 12 December 2011

Contents

Introduction

It has been noticed that the most basic issues seen with the Ciscoworks LMS on its Syslog configuration is because its basic Architecture is not known. This document is intended to give a brief introduction on LMS Syslog Configuration and Architecture for effective Syslog Management using Ciscoworks RME.

Design

20111212110605!Syslog cycle.JPG

Configuration

I. Following is the Diagram on how CiscoWorks Generate reports for Syslog. RME Syslog reports are not directly fetched from Syslog.log (Log.JPG), instead the Syslog messages are being processed and then sent to Syslog DataBase (Syslog.db).

II. Syslog messages are being collected on Syslog.log (or Syslog_info in Solaris) and from here the Syslog Collector(Engine.JPG)service receive, filter and forward syslog’s to one or more Syslog Servers (if Remote Syslog, or, RSAC) or to local Server(if Local), thus reducing traffic on the network as well as processing load on the server. So, Syslog Collector is a service that runs independently, listens for syslogs and forwards them to the registered applications after necessary filtering.

III. From here the Syslog Analyzer (Analyzer.JPG) role is started. The Syslog Analyzer receives syslogs from the Common Syslog Collector, invokes automated actions that have been configured for RME, and stores the syslogs in the database. We can use the Syslog Analyzer to generate many useful reports on the syslogs stored in the Syslog Database (Db.JPG).

All the reports are hence generated from Syslog DB by RME (Gui.JPG) and a Syslog message is only entered to Syslog Db once its successfully picked by Syslog Collector and then if the Filter is set to forward it to Syslog Db.

Hence after the Syslog Collector is successfully subscribed the highest attention has to paid to the Syslog Filter Settings so that the important syslog messages are not getting filtered out. Also, to view the status of the Common Syslog Collector to which the Syslog Analyzer is subscribed to, follow this procedure:

Select Resource Manager Essentials > Tools > Syslog > Syslog Collector Status.

Related Information

This section provides information you can use to confirm your configuration is working properly.

More detailed information on the Syslog Configuration can be gathered from the ciscoworks User Guide from [1] and the on Syslog Troubleshooting from [2] .

You can check if the Syslog Collector is subscribed and is showing the Syslog Messages as forwarded and try generating a 24 hour report from Ciscoworks on Syslog.

CiscoWorks LAN Management Solution Introduction

Rating: 5.0/5 (3 votes cast)

Personal tools