[nsp] Syslog best practices.

[John Wong, Kok Seng]

Use syslog-ng. It can parse regex based on host IP, etc..
so u can split the logs to different files. I'm using it
to capture all the syslogs of my switches & routers.

Hope it helps.


> -----Original Message-----
> From: James Kilton [mailto:kilton9 at yahoo.com] 
> Sent: Friday, January 24, 2003 11:23 PM
> To: cisco-nsp at puck.nether.net
> Subject: [nsp] Syslog best practices.
> 
> 
> I'm preparing to deploy a few Syslog servers to
> receive logs from our Cisco devices, and I'm wondering
> how people typically handle having only 8 Syslog
> facilities to use per server when there are more than
> 8 Cisco devices on the network.  Do you just have all
> Cisco devices write to the same file?  Do you split it
> up randomly?  Or maybe have 1 file per criticality
> level?
> 
> Any advice would be appreciated.
> 
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
> http://mailplus.yahoo.com
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>