From: Tyson Scott (tscott@ipexpert.com)
Date: Thu Jan 22 2009 - 18:17:41 ARST
Guarav,
That is correct. It is stored locally. If syslog is enabled then it is
stored in both.
Regards,
Tyson Scott - CCIE #13513 R&S and Security
Technical Instructor - IPexpert, Inc.
Telephone: +1.810.326.1444
Cell: +1.248.504.7309
Fax: +1.810.454.0130
Mailto: tscott@ipexpert.com
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Darby Weaver
Sent: Thursday, January 22, 2009 1:00 PM
To: GAURAV MADAN
Cc: Aundra Browning; Cisco certification
Subject: Re: Logging / Archieve
Hmm....
Something new every day. Let me check into this one and see exactly how it
works.
On Thu, Jan 22, 2009 at 3:58 AM, GAURAV MADAN
<gauravmadan1177@gmail.com>wrote:
> Hi Aundra / Darby
>
> PLzz have a look at below :
>
> (config)#do sh run | sec arch
> archive
> log config
> logging enable
> notify syslog contenttype plaintext <========
> hidekeys
> Your config can or cannot have "notify syslog" enable .. My understanding
> is that if you don not include this commmand under archieve commands ; it
> will be archieved locally .. else locally + syslog server .
>
> So that ws the reason i was asking the query .
> Please lemme know if I am wrong
>
> Gaurav Madan.
>
>
> On Wed, Jan 21, 2009 at 11:23 PM, Darby Weaver
<ccie.weaver@gmail.com>wrote:
>
>> Exactly.
>>
>> In my real world networks - I've not managed to find a way to log one in
>> lieu of the other. If you an do this, I'm not immediately aware of it.
>>
>> Usually they happen at the same time as Aundra has stated.
>>
>>
>> The best thing to do would be to look at the exam key of the lab and see
>> what the author came up with. I hate to cheat the process but if it
really
>> is that interesting.
>>
>> Which workbook are you working from?
>>
>>
>>
>>
>> On Wed, Jan 21, 2009 at 10:43 AM, Aundra Browning <
>> aundra.browning@earthlink.net> wrote:
>>
>>> Gaurav,
>>>
>>> If you are referencing config change notification & logging (CCN through
>>> "archive" command), I think you are confusing the two.
>>>
>>> CCN logging would be used to send log messages to syslog (through either
>>> the
>>> local buffer or a remote logging destination) when the config of a
device
>>> changes - it doesn't log other system events such as OSPF adj. changes,
>>> or
>>> interface flaps, etc.
>>>
>>> I would interpret the question below as system logging - meaning we want
>>> to
>>> see all events (interface flaps, routing protocol changes, whatever else
>>> is
>>> configured). In this case I would configure local logging through the
>>> buffer
>>> (logging buffered) and the remote syslog destination.
>>>
>>> There is no prioritization as far as I know, if multiple logging
>>> destinations are configured along with local logging, IOS sends messages
>>> to
>>> all destinations. So in this case, if you had no connectivity to the
>>> remote
>>> server, you should still send messages to local buffer (provided no
>>> reboot
>>> has occurred...)
>>>
>>> Aundra
>>> CCIE #21901 (R&S)
>>>
>>> -----Original Message-----
>>> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
>>> GAURAV MADAN
>>> Sent: Wednesday, January 21, 2009 10:14 AM
>>> To: Darby Weaver
>>> Cc: Cisco certification
>>> Subject: Re: Logging / Archieve
>>>
>>> Darby
>>>
>>> If I take the point given by you .. how are we sure that logg is
buffered
>>> only if logg sever fails .
>>> I mean how is this priotized
>>>
>>> gaurav madan
>>>
>>> On Wed, Jan 21, 2009 at 8:42 PM, Darby Weaver <ccie.weaver@gmail.com>
>>> wrote:
>>>
>>> > I'd usually interpret this as logging buffered but hey I haven't
passed
>>> the
>>> > lab yet.
>>> >
>>> >
>>> >
>>> >
>>> > On Wed, Jan 21, 2009 at 10:11 AM, Darby Weaver
>>> <ccie.weaver@gmail.com>wrote:
>>> >
>>> >> Overconfigure it or ask the proctor.
>>> >>
>>> >>
>>> >>
>>> >>
>>> >> On Wed, Jan 21, 2009 at 9:15 AM, GAURAV MADAN
>>> <gauravmadan1177@gmail.com>wrote:
>>> >>
>>> >>> Friends
>>> >>>
>>> >>> I have a small doubt ..
>>> >>> If ques says that logg shd be sent to server at 10.0.0.2 (example) .
>>> If
>>> >>> server is not available ; these entries shd be logg locally
>>> >>>
>>> >>> Now first part is simply " logg 10.0.0.2 "
>>> >>> For second part :
>>> >>> [A] We can log buff
>>> >>> [B] We can archieve ..
>>> >>> etc
>>> >>>
>>> >>> What would one prefer .....
>>> >>> Say I have configured archieve .. how do we make sure that if and
>>> only
>>> if
>>> >>> logg server fails ; then only our router will start logging the info
>>> >>> locally
>>> >>>
>>> >>> Please guide
>>> >>> Gaurav Madan.
>>> >>>
>>> >>>
>>> >>> Blogs and organic groups at http://www.ccie.net
>>> >>>
>>> >>>
>>> _______________________________________________________________________
>>> >>> Subscription information may be found at:
>>> >>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:39 ARST