[c-nsp] Router logs going to dmesg

[John Kougoulos]

Hello,

somewhere at the start of syslog.conf you will see something like:
*.err                      /dev/sysmsg
*err;kern.debug		   /var/adm/messages

*.alert;kern.err	  operator
etc.

change it to something like:
*.err;local0.none	      /dev/sysmsg
*err;kern.debug;local0.none   /var/adm/messages

etc.

and then pkill -1 syslogd

Regards,
John

On Mon, 21 Sep 2009, Andy Saykao wrote:

> Hi All,
>
> I'm trying to send cisco logs to a syslog server running Solaris 9. It's
> logging fine except that I'm seeing some logs showing up in dmesg.
>
> Example of a dmesg outout:
>
> Sep 21 13:44:16 [172.16.9.18.224.173] 3297: Sep 21 13:44:15.981 AEST:
> %LINK-3-UPDOWN: Interface GigabitEthernet0/45, changed state to down
> Sep 21 13:44:21 [172.16.9.18.224.173] 3298: Sep 21 13:44:20.956 AEST:
> %LINK-3-UPDOWN: Interface GigabitEthernet0/45, changed state to up
> Sep 21 13:48:38 agr1-cr-loopback-0.x.x.x 315047: Sep 21 13:48:37.756
> AEST: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host
> 83.143.128.1
>
> I've tried changing the facility to local0.info on the cisco devices but
> still the same thing is happening. Is there a particular facility I
> should be using so the logs don't appear in dmesg???
>
> This was the only thing I could find on goggle about my problem but no
> real solution.
>
> http://www.velocityreviews.com/forums/t34315-which-facility-is-best-for-
> logging-to-linux-syslog.html
>
>
> This is my /etc/syslog.conf file.
>
> # Log cisco routers
> local0.info                                     /var/log/cisco.log
>
>
> And my config on the routers.
>
> logging facility local0
> logging source-interface Loopback0
> logging 210.15.210.x
>
> Thanks.
>
> Andy
>
> This email and any files transmitted with it are confidential and intended
> solely for the use of the individual or entity to whom they are addressed.
> Please notify the sender immediately by email if you have received this
> email by mistake and delete this email from your system. Please note that
> any views or opinions presented in this email are solely those of the
> author and do not necessarily represent those of the organisation.
> Finally, the recipient should check this email and any attachments for
> the presence of viruses. The organisation accepts no liability for any
> damage caused by any virus transmitted by this email.
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>