CHAPTER
14-1
User Guide for Resource Manager Essentials 4.1
OL-11714-01
14
Enabling and Tracking Syslogs Using Syslog
Analyzer and Collector
The Syslog Analyzer application along with the syslog collector lets you centrally log and track syslog
messages (error, exception, information etc) sent by devices in the network. The logged message data
can be used to analyze network device performance. Syslog Analyzer application can also be customized
to store and produce the information important to you.
The Syslog Analyzer application, or the Syslog Analyzer, works together with the Common Syslog
Collector (CSC) (see Overview: Common Syslog Collector).
The Syslog Analyzer receives syslogs from the Common Syslog Collector, invokes automated actions
that have been configured for RME, and stores the syslogs in the database. You can use the Syslog
Analyzer to generate many useful reports on the syslogs stored in the database. You can also define
templates for custom reports.
Network devices can be configured to send Syslog messages directly to the Common Syslog Collector
installed on the CiscoWorks Server or a remote network host on which a Syslog Collector is installed.
The Common Syslog Collector is configured to filter and forward messages to the CiscoWorks Server.
In addition, Syslog Analyzer application also notifies:
Inventory application, when a network device sends a inventory change syslog messages like
SYS-5-RELOAD, SNMP-5-COLDSTART etc. For a complete list of messages that trigger Inventory
collection see Table 14-1
.
Ta b l e 14-1 Messages that Trigger Inventory Collection
Facility Sub-facility Severity Mnemonic Description
* * * RESTART *
RESTART * * * *
OIR * 6 INSCARD *
SYS * 5 ONLINE *
SNMP * 5 COLDSTART *
SYS * 5 RELOAD *
CPU_REDUN * 6 BOOTED_AS_ACTIVE *
CPU_REDUN * 5 SWITCHOVER *
Nodemgr * 5 CE *REBOOT*