Video Screencast Help

Switch and Router in SSIM

Created: 26 Dec 2012 | 6 comments

How to recieve logs from cisco switch and router into SSIM.

I have two solutions, please help me to find proper solution with detailed steps. I will be really grateful as we are pending with this activity from long ago.

1. we can turn SSIM server into syslog server so that it can directly recieve logs from device.

2. we can apply filters on syslog server collector recieve required logs.

 

Comments 6 CommentsJump to latest comment

Hrishikesh Chikate's picture

Why I am not getting any response from symentec?

Laurent_c's picture

Hi,

The best way, is to use the CISCO IOS Collector, and configure all your devices to forward syslog to either a central server that redirect to SSIM, or to SSIM itself if you have no central syslog server.

 

Laurent

SK Ooi's picture

Filters can be configured at the Collector Sensor level under filtering.

 

OR you can create specific Event Archiving rules to store on selected logs based on criteria that you setup.

 

Hope that helps

sk

Hrishikesh Chikate's picture

Thanks for the response we will perform this activity tommorow..lets hope it works. meanwhile can i get modifications required in filters of collector.

Milan_T's picture

Best way to integrate routers and switches with SSIM is to configure management syslog server for switches and routers.

After that you need to configure router and switches to send syslog to management server.

Now install Agent and appropriate collectors on management to send logs to SSIM compliance.

This configuration will help to increase productivity of SSIM and network because collector load will be reduced at management server.