Log OS6450

[saso_ri]

Hello,

I want to send the logs of my switch Alcatel OS6450 to a log server under Linux (Debian).
(To configure my server correctly)

Question:
What port does my Alcatel OS6450 switch send its logs to (UDP(540..) or TCP(...)?

Thanks !

[silvio]

hello
> swlog output socket 192.168.10.2
default UDP Port is 514

regards
Silvio

[saso_ri]

Hello, thank you M Silvio for the answer .

I want to retrieve the logs of the Alcatel OS6450 switch on a log server (Linux Debian) using syslog-ng

I want to retrieve logs of type bridge (level warning) in my server log

Switch OS6450 Configuration (@192.168.0.2) :

Code: Select all

swlog
swlog appid bridge level warning
swlog output socket 192.168.0.1

Server log (@192.168.0.1):

Code: Select all

source s_client {syslog(ip(192.168.0.2) transport(udp)) ;  };
destination d_local {file("/var/log/logs.log"); };
log {source(s_client); destination(d_local); };

But I can not. Someone already do it? Another solution to retrieve my logs on a server?

Thanks !

[silvio]

Hi,
please check "show swlog"

Have you a sniffer (wireshark) at your server to test it?

regards
Silvio

[saso_ri]

Hi,
I have succeeded, thanks for your help!

[devnull]

Mind to provide your solution, so others can learn from that?

[saso_ri]

Hi,
For my OS6450

Code: Select all

swlog
swlog output socket @server_log

For my log server (i use syslog-ng on y Debain)

In the file nano /etc/syslog-ng/syslog-ng.conf

Code: Select all

@include ‘’/etc/syslog-ng/conf.d/’’

source s_udp              { udp() ; } ;
destination d_dest      { file(‘’/var/log/alcatel.log’’) ;  } ;
filter switch                { host(‘’@_IP_switch’’) ;  } ;
log                             { source(s_udp) ; destination(d_dest) ; filter(switch) ;  } ;

Finally, it is necessary to restart syslog-ng to take into account the new configuration:

Code: Select all

/etc/init.d/syslog-ng restart

The logs of the switch are now sent to the file "alcatel.log"

Code: Select all

nano /var/log/alcatel.log

end