From: Jason Madsen (madsen.jason@gmail.com)
Date: Sun Feb 03 2008 - 19:06:01 ARST
I guess it wouldn't be too difficult for one to determine which config'
change log entries corresponding wtih which syslog entries though for the
purpose of looking for proctor changed events, which was what I believe
Mohammed was looking for. There really shouldn't be that many logged events
during breaks / lunch etc anyway and all of the config' changes would be
logged with "PARSER" included in their lines / descriptions so a simple "*show
logg | include PARSER*" should suffice.
Jason
On Feb 3, 2008 1:55 PM, Jason Madsen <madsen.jason@gmail.com> wrote:
> ok, I did realize that. I was hoping there was a way for configuration
> change logging to track and list it in its logging area. I just did a
> random test and my syslog log filled up with 6,352 entreis while my config'
> change log only had about 10. I suppose we could correlate each config'
> change with its timestamp in the syslog log using pipes / redirection
> somehow, but it would be nice if the config' change logger just provided the
> time stamps directly...oh well.
>
> Jason
>
> On Feb 3, 2008 1:50 PM, shiran guez <shiranp3@gmail.com> wrote:
>
> > you will not see the timestamp when doing show archive log... you will
> > see the log in show logging and in your syslog server with the time stemp
> > after enabling under the archive > log config > notify syslog
> >
> > On Feb 3, 2008 10:11 PM, Jason Madsen <madsen.jason@gmail.com> wrote:
> >
> > > that's weird. The cisco doc's state that this feature does track and
> > > record the timestamp at which changes were made, however, when I do a "show
> > > archive log config all" I get all info except the time stamp. I tried
> > > modifying my logging timestamp settings in "service timestamps log
> > > datetime...", but this did not change my archive log entries. Very weird.
> > > Here are a couple of Cisco links that state that the time changes are logged
> > > are supposed be time recorded:
> > >
> > >
> > > http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_25_see/configuration/guide/swcli.html#wp1067198
> > >
> > >
> > > http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00801d1e81.html
> > > Anyone have any insight on this topic?
> > >
> > > Jason
> > > On Feb 3, 2008 1:28 AM, Mohammad <www.engineer@gmail.com> wrote:
> > >
> > > > Hi Shiran,
> > > >
> > > > Is there a way that this config logger shows a timestamp when did
> > > > the
> > > > change take place?
> > > >
> > > >
> > > > On 2/1/08, shiran guez <shiranp3@gmail.com> wrote:
> > > > >
> > > > > You can set on all the routers:
> > > > >
> > > > > Router(config)#archive
> > > > > Router(config-archive)#log config
> > > > > Router(config-archive-log-cfg)#logging enable
> > > > > Router(config-archive-log-cfg)#logging size 1000
> > > > > Router(config-archive-log-cfg)#^Z
> > > > > HOME-GUEZ#sh archive log config all
> > > > > idx sess user@line Logged command
> > > > > 1 1 shiranp3@vty0 | logging enable
> > > > > 2 1 shiranp3@vty0 | logging size 1000
> > > > > Router#
> > > > > but I really think the proctor have other things to do other then
> > > > mess
> > > > > with
> > > > > your config!
> > > > > On Jan 31, 2008 2:34 PM, dave dave <funccie@gmail.com> wrote:
> > > > >
> > > > > > Hi Expert,
> > > > > >
> > > > > > I have heard that sometime procter do the changes to our
> > > > config. I just
> > > > > > want to know what are the way we can find that he has done some
> > > > changes
> > > > > to
> > > > > > config.
> > > > > >
> > > > > > Is any way we can track this?
> > > > > >
> > > > > > Regards,
> > > > > > Dave
> > > > > >
> > > > > >
> > > > _______________________________________________________________________
> > > > > > Subscription information may be found at:
> > > > > > http://www.groupstudy.com/list/CCIELab.html
> > > > > >
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > Shiran Guez
> > > > > MCSE CCNP NCE1
> > > > > http://cciep3.blogspot.com
> > > > > http://www.linkedin.com/in/cciep3
> > > > >
> > > > >
> > > > _______________________________________________________________________
> > > > > Subscription information may be found at:
> > > > > http://www.groupstudy.com/list/CCIELab.html
> > > > >
> > > >
> > > >
> > > >
> > > > --
> > > > Best Regards,
> > > > Mohammad
> > > >
> > > >
> > > > _______________________________________________________________________
> > > > Subscription information may be found at:
> > > > http://www.groupstudy.com/list/CCIELab.html
> > > >
> > >
> > >
> >
> >
> > --
> > Shiran Guez
> > MCSE CCNP NCE1
> > http://cciep3.blogspot.com
> > http://www.linkedin.com/in/cciep3
This archive was generated by hypermail 2.1.4 : Sat Mar 01 2008 - 16:54:47 ARST