topic syslog server logs in General Topics

syslog server logs

Jafar_Hussain — Thu, 04 Nov 2021 12:06:46 GMT

Hello,

I am facing an issue to get the alerts for my syslog server ( description contains 'Syslog connection broken to server[\'AF_INET.127.0.0.1:2625.\']' )

every two hours I am getting alerts. i checked the sys-ng.log and took the packet capture but I can see the same error.

Below is the configuration:-

sys log Server IP- 192.1681.1

protocol - UDP

port - 514.

Format - BSD

service route is by default by management server.

In the Syslog server, I am getting log properly only issue is I am getting alerts:-

Re: syslog server logs

BPry — Thu, 04 Nov 2021 13:47:41 GMT

@Jafar_Hussain,

On your packet capture that you took are you seeing the syslog traffic break down? It triggering at exactly every two hours I would really be looking at the network path and the syslog server itself, starting with the syslog server. A very easy test would be to simply toss another device to the same server and see if it also sees the connection breakdown at the two hour mark.

Re: syslog server logs

dawoodJabbar — Fri, 05 Nov 2021 09:33:54 GMT

sys log Server IP is 192.168.1.25 😉