[nsp] Syslog best practices.

[Me]

Most I have seen just have all devices write to the same file.  Each log 
message includes the IP address (or dns name) of the device that sent 
the log, so you can then split it up if you like...



On 
Fri, 24 Jan 2003, James Kilton wrote:

> Date: Fri, 24 Jan 2003 07:22:36 -0800 (PST)
> From: James Kilton <kilton9 at yahoo.com>
> To: cisco-nsp at puck.nether.net
> Subject: [nsp] Syslog best practices.
> 
> I'm preparing to deploy a few Syslog servers to
> receive logs from our Cisco devices, and I'm wondering
> how people typically handle having only 8 Syslog
> facilities to use per server when there are more than
> 8 Cisco devices on the network.  Do you just have all
> Cisco devices write to the same file?  Do you split it
> up randomly?  Or maybe have 1 file per criticality
> level?
> 
> Any advice would be appreciated.
> 
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
> http://mailplus.yahoo.com
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 

-- 
-sean
Spoon!