Introduction to Syslog Octavio Alvarez email@example.comSan Diego Cisco User Group July 19th, 2012
Overview● Problems to solve● The Syslog protocol● Technicalities – Protocol content, RFCs, etc.● Example of topologies – A simple one and one a bit more complex.● Simple demonstration Feel free to interrupt me at any time!
Problems to solve● Having to look in each device separately for information collection.● Having the clocks not exactly synchronized.● Hard to search in devices without search support (like "include" or "grep").● Having to look for past events (more than N-bytes ago).
Introducing Syslog● A protocol.● A de-facto standard...● ... a documented de-facto standard (RFC 3164)● ... and is being standardized (RFC 5424, obsoletes RFC 3164).
The simplest possible logging implementation with Syslog