Re: syslog discriminator

Thanks, that's a good example!

On 2 June 2010 17:41, Tom Kacprzynski <tom.kac_at_gmail.com> wrote:

> Hello,
> Here is an example that should help you. I have a logging discriminator to
> get only security related messages (SECMGS as i called it) that have the
> facility SEC and FW sent to one syslog server, while everything (NO_SEC as i
> called it) else is sent to another server.
> After the "drop" or "include" you just put in a regular expression, in my
> case I'm looking for SEC or FW facility.
>
> logging discriminator NO_SEC facility drops (SEC|FW)
> logging discriminator SECMSG facility includes (SEC|FW)
>
> logging host 1.2.3.4 discriminator SECMSG
> logging host 6.7.8.9 discriminator NO_SEC
>
> Hope that helps and here is a like that talks a little bit about it.
>
> http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/htnmsylg.html#wp1056391
>
> Tom K.
>
> On Wed, Jun 2, 2010 at 11:26 AM, Muzammil Malick <malickmuz_at_gmail.com>wrote:
>
>> Hi
>>
>> Does anybody have any links to documentation regarding the syslog
>> discriminator.
>> I have read the config guide section but it is not very clear and I wanted
>> to see it being applied in an example.
>>
>> Thanks
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Wed Jun 02 2010 - 19:18:50 ART