Configuring Cisco IOS to forward events

Take the following steps to configure your Cisco device:

1. Log in to your Cisco IOS Server, switch, or router.

2. Type the following command to log in to the router in privileged-exec:

enable

3. Type the following command to switch to configuration mode:

conf t

4. Type the following commands:

logging <IP address> - Forwarder IP

logging source-interface <interface>

Where <IP address> is the Forwarder IP address. and <interface> is the name of the interface,

for example, dmz, lan, ethernet0, or ethernet1.

5. Type the following to configure the priority level:

logging trap Informational

logging console Informational

Where warning is the priority setting for the logs.

6. Configure the syslog facility:

logging facility syslog

7. Save and exit.

8. Copy the running-config to startup-config by typing the following command:

copy running-config startup-config

Example:

– sh ip interface brief

sh run | i logging

logging console informational

logging trap informational

logging facility syslog

logging source-interface Vlan101 (Need to check in Interface )

logging host 10.1.101.21

Once the configuration is done at the device level, need to modify/check the configuration in config file which will be setup at initial stage of forwarder installation.

Example:

- syslog:

   common:

    enabled: true

    data_type: CISCO_IOS

    data_hint: batch_n_seconds: 10

    batch_n_bytes: 1048576

  tcp_address: 0.0.0.0:11529

  udp_address: 0.0.0.0:11529