Configuring Syslog in Cisco IMC

This chapter contains the following sections:

Syslog Configuration

You can configure syslog in Cisco IMC using both Cisco IMC GUI and the Cisco IMC CLI.

Configuring Syslog Using Cisco IMC GUI

Procedure

Step 1

In the Navigation pane, click the Chassis menu.

Step 2

In the Chassis menu, click Faults and Logs.

Step 3

In the Logging Controls tab, enter the following information:

Remote Logging

Name Description

Enabled check box

If checked, the Cisco IMC sends log messages to the Syslog server named in the IP Address field.

Host Name/IP Address field

The address of the Syslog server on which the Cisco IMC log should be stored. You can set an IPv4 or IPv6 address or a domain name as the remote system address.

Port field

Enter a destination port number of the Syslog server within the range 1 to 65535. The default port number is 514.

Minimum Severity to Report field

Specify the lowest level of messages that will be included in the remote logs. You can select one of the following:

  • Emergency

  • Alert

  • Critical

  • Error

  • Warning

  • Notice

  • Informational

  • Debug

Note 
The Cisco IMC does not remotely log any messages with a severity below the selected severity. For example, if you select Error, then the Cisco IMC remote log contains all messages with the severity Emergency, Alert, Critical, or Error. It does not show Warning, Notice, Informational, or Debug messages.

Local Logging

This area displays only the Minimum Severity to Report drop-down list as shown in the table above. You can specify the lowest level of messages to be included in the local log

Configuring Syslog Using the Cisco IMC CLI

You can configure profiles for one or two remote syslog servers to receive Cisco IMC log entries.

Before you begin

  • The remote syslog server must be configured to receive logs from a remote host.

  • The remote syslog server must be configured to receive all types of logs, including authentication-related logs.

  • The remote syslog server's firewall must be configured to allow syslog messages to reach the syslog server.

Procedure

  Command or Action Purpose
Step 1

Server# scope cimc

Enters the Cisco IMC command mode.

Step 2

Server /cimc # scope log

Enters the Cisco IMC log command mode.

Step 3

(Optional) Server /cimc/log # set remote-syslog-severity level

(Optional)

The severity level can be one of the following, in decreasing order of severity:

  • emergency

  • alert

  • critical

  • error

  • warning

  • notice

  • informational

  • debug

Note 

Cisco IMC does not remotely log any messages with a severity below the selected severity. For example, if you select error , then the remote syslog server will receive all Cisco IMC log messages with the severity Emergency, Alert, Critical, or Error. It will not show Warning, Notice, Informational, or Debug messages.

Step 4

Server /cimc/log # scope server {1 | 2 }

Selects one of the two remote syslog server profiles and enters the command mode for configuring the profile.

Step 5

Server /cimc/log/server # set server-ip ipv4 or ipv6 address or domain name

Specifies the remote syslog server address.
Note 

You can set an IPv4 or IPv6 address or a domain name as the remote server address.
Step 6

Server /cimc/log/server # set server-port port number

Sets the destination port number of the remote syslog server.

Step 7

Server /cimc/log/server # set enabled {yes | no }

Enables the sending of Cisco IMC log entries to this syslog server.

Step 8

Server /cimc/log/server # commit

Commits the transaction to the system configuration.

Example

This example shows how to configure a remote syslog server profile and enable the sending of Cisco IMC log entries with a minimum severity level of Warning: 

Server# scope cimc
Server /cimc # scope log
Server /cimc/log # set remote-syslog-severity warning
Server /cimc/log *# scope server 1
Server /cimc/log/server *# set server-ip www.abc.com
Server /cimc/log/server *# set server-port 514
Server /cimc/log/server *# set protocol udp
Server /cimc/log/server *# set enabled yes
Server /cimc/log/server *# commit
Server /cimc/log/server # exit
Server /cimc/log # show server
Syslog Server 1:
    Syslog Server Address: www.abc.com
    Syslog Server Port: 514
    Enabled: yes      

Server /cimc/log # show remote-syslog-severity
    Remote Syslog Severity: warning

Server /cimc/log #