Syslog problem

[heyyunus]

Hi,

I have installed Kiwi Syslog server. I then configured my Netscreen to Enable Syslog for that particular server using UDP port 514. But the problem is Netscreen is not sending any logs to the syslog server. I have done a lot of research and confirmed the following before posting this.

a) Netscreen can ping the syslog server with IP.
b) No firwalls are running on the syslog server
c) Its properly configured to listen for UDP 514.
d) TCP option is not selected in Netscreen so it has been told that the syslog server is listening on UDP port 514.
e) Display option is selected in the syslog server.
f) using Kiwi sysloggen in another m/c i verified that the syslog server is properly working because it displays the test msg sent from another m/c using Kiwi sysloggen.

I know it is the problem with Netscreen, but dont know what extra config its looking for.

Please help




-------
Yunus

 

[stooo]

I use kiwi syslog for some of our netscreens. Can you run ethereal or similar on the kiwi server and see if anything is coming from the netscreen (to make sure kiwi filters aren't dropping the logs?)

On the netscreen
Make sure you have stuff ticked for syslog under report settings - log settings

Stu