We've missunderstood i have in my logs on observium only "%:" nothing more :)

Tomasz Karczewski

Administrator Sieci

tkarczewski@man.olsztyn.pl

http://www.man.olsztyn.pl       http://www.uwm.edu.pl

tel. (89) 523 45 55  fax. (89) 523 43 47

Ośrodek Eksploatacji i Zarządzania

Miejską Siecią Komputerową OLMAN w Olsztynie

Uniwersytet Warmińsko-Mazurski w Olsztynie

From: observium [mailto:observium-bounces@observium.org] On Behalf Of Karsten Schwarz
Sent: Thursday, August 14, 2014 3:05 PM
To: Observium Network Observation System
Subject: Re: [Observium] Observium Syslog-NG and Cisco Catalyst

Hi Tomasz,

there is no problem! This is the Cisco Syslog Message format.
Look at cisco.com for the Embedded Syslog Manager Configuration Dokumentation for your IOS release, you will find something like that:

System Logging Message Formatting

System logging messages are displayed in the following format:

%<facility>-<severity>-<mnemonic>: <message-text>

For example:

%LINK-5-CHANGED: Interface Serial3/3, changed state to administratively down

Usually, these messages are preceded by additional text, such as the timestamp and error sequence number:

<sequence-number>: <timestamp>:%<facility>-<severity>-<mnemonic>: <message-text>

For example:

000013: Mar 18 14:52:10.039:%LINK-5-CHANGED: Interface Serial3/3, changed state
to administratively down

Which will result in a syslog message on your logserver like:

<timestamp-recv><hostname><seq#><timestamp-sent><above message format>

If you want a different "look" in your logfile, you have to use templates in you syslogd configuration to reformat the message.

regards

Karsten



From:        "Tomasz Karczewski" <tkarczewski@man.olsztyn.pl>
To:        "'Observium Network Observation System'" <observium@observium.org>
Date:        14.08.2014 10:29
Subject:        [Observium] Observium Syslog-NG and Cisco Catalyst
Sent by:        "observium" <observium-bounces@observium.org>

---

Hi,

I've got one problem with logs from cisco catalyst switches.
On switches logs looks fine but in observium i have something like that "% :"
Other vendors looks fine in logs. Where could be the problem?

Tomasz Karczewski
Administrator Sieci



tkarczewski@man.olsztyn.pl
http://www.man.olsztyn.pl http://www.uwm.edu.pl
tel. (89) 523 45 55  fax. (89) 523 43 47

Ośrodek Eksploatacji i Zarządzania
Miejską Siecią Komputerową OLMAN w Olsztynie
Uniwersytet Warmińsko-Mazurski w Olsztynie
_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

---

Pensez à l'environnement avant d'imprimer ce message / Think of the environment before printing out this message