please log some messages with the template RSYSLOG_DebugFormat so we can see
exactly what is being sent, along with all the variables that it's being parsed
into. (and go ahead and send those in the email rather than posting to pastebin)
David Lang
On Wed, 20 Mar 2024, Pedro Caetano via rsyslog wrote:
Date: Wed, 20 Mar 2024 15:12:11 +0000
From: Pedro Caetano via rsyslog <rsyslog@lists.adiscon.com>
To: rsyslog@lists.adiscon.com
Cc: Pedro Caetano <pedrocaet...@binaryflows.com>
Subject: [rsyslog] question: decoding cisco syslog messages using pmciscoios
Hi,
After installing rsyslog and rsyslog-pmciscoios, I'm able to load the
module without issues using the example present in the documentation.
This are the installed packages:
rsyslog.x86_64 8.2404.0.master-1710892962
rsyslog-pmciscoios.x86_64 8.2404.0.master-1710892962 @rsyslog_v8
We have experimenting with present.origin on and off, still observing
garbled text on the logfiles, example here:
https://pastebin.com/wQ8LbwfP
The device pushing the logs is a cisco switch c2960x running the
following ios: c2960x-universalk9-mz.152-7.E7.bin
The configuration on the switch is as follows:
logging trap notifications
logging origin-id hostname
logging facility syslog
logging source-interface Vlan275
logging snmp-trap emergencies
logging snmp-trap alerts
logging snmp-trap critical
logging snmp-trap errors
logging snmp-trap warnings
logging host 10.150.0.7 transport tcp port 20514
logging host 192.168.190.226 transport tcp port 20514
Any help would be greatly appreciated.
Thank you,
Pedro Caetano
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
