Setting Syslog 1

[jkaftan]

Is there a way I can have to 2950s stop reporting on interfaces going up and down in syslog level 3?

I am setting up syslog on my switches. I have the level set to error or level 3. In my log I get a lot of static with interfaces just going up and down. There are only a few interfaces that I care about i.e. servers and uplinks and I am monitoring those via snmp. So I don't care about interfaces going up and down but I want to see any other errors that might happen.

Thanks

 

[vipergg]

Make sure "snmp trap link status" is not enabled on any port you do not want to see the error messages.

 

[brianinms]

Not that I am aware of.

 

[VinceWhirlwind]

If you have the time to look into this, you can get the switch to log what ever you want:

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps6815/datasheet_c78-492444.html

 

[brianinms]

Vince, that doesn't apply to 2950's.

 

[VinceWhirlwind]

Ah. So people still use those do they?
[Must learn to read...]

 

[jkaftan]

I opened a case with Cisco and they said no way. It is just annoying to me that a port going down is an error. That is really just information.

The ports I care about are monitored via snmp.

Perhaps I can find a way to filter those events prior to writing to the syslog.

 

[burtsbees]

Yes---there are three levels that will not tell you about a link going down, unless it is flapping...

switch#logging trap alerts
or
switch#logging trap critical
or
switch#logging trap emergencies

Those will do nothing if an interface simply goes down, and maybe comes back up (I think 5 times per minute or faster will trigger a flap condition).

All the rest (debugging, notifications, informational, warnings and errors) all will tell you each time an interface goes down.

Burt

 

[burtsbees]

I might add that you may not see other messages you would otherwise want. You may also want to play with

logging source-interface

The only way this is possible (with what you want) is with vlans---if you have all your servers in one vlan, then you can specify to log only for that vlan, and all the other interfaces will not be included ion the syslog...

logging source-interface vlan 12

Burt