search

Cacti / plugin_syslog

Syslog Plugin for Cacti
GNU General Public License v2.0
21 stars 16 forks source link

No logs showing from Ubiquiti Edgeswitch #45

Closed glwallum closed 6 years ago

glwallum commented 6 years ago

Installed and configured, no logs populating from Ubiquiti Edgeswitch devices.

Tested environment with Cisco devices (syslogs show) Tested with wireshark to show logs were being sent correctly to server

Below is wireshark capture of the log.

5 26.326881061 172.16.0.11 → 172.16.0.6 Syslog 194 USER.NOTICE: Jan 22 04:52:53 devicename TRAPMGR[trapTask]: traputil.c(735) 43784 %% Session 0 of type 3 ended for user username connected from 172.16.0.8.\000

netniV commented 6 years ago

Do you see anything in the syslog_incoming table? If not, check that your syslog daemon configuration is correctly setup to put it into the table.

glwallum commented 6 years ago

Yes they are appearing in the syslog_incoming table.Below are two examples, the first is the cisco switch that is generating syslogs and the other is the Ubiquiti which are not. I tested another syslog program and the Ubiquiti messages were coming through as normal. Please let me know of any solutions it would be greatly appreciated

| 23 | 4 | %CDP-W-NATIVE_VLAN_MISMATCH | 2018-04-24 | 13:07:3 0 | 172.16.0.16 | Native VLAN mismatch detected on interface gi2.

                    | 249371 |      0 |

| 1 | 6 | DNS_CLI | 2018-09-02 | 03:01:2 2 | C1S2EdgeSwitch-1 | dns_client_txrx.c(711) 995301 %% DNS Client: Failed to s end query packet. Can't reach DNS server at 255.255.255.255. | 249372 | 0 |

On Tue, Apr 24, 2018 at 11:56 AM, Mark Brugnoli-Vinten < notifications@github.com> wrote:

Do you see anything in the syslog_incoming table? If not, check that your syslog daemon configuration is correctly setup to put it into the table.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/Cacti/plugin_syslog/issues/45#issuecomment-383985304, or mute the thread https://github.com/notifications/unsubscribe-auth/Ai8CAxFMxTwZRGD7K-8CxOZhT82dx-_Cks5tr0s8gaJpZM4TgETz .

glwallum commented 6 years ago

I have found the issue, the NTP server is giving false times. Please close

On Tue, Apr 24, 2018 at 1:16 PM, Gordon Wallum glwallum@gmail.com wrote:

Yes they are appearing in the syslog_incoming table.Below are two examples, the first is the cisco switch that is generating syslogs and the other is the Ubiquiti which are not. I tested another syslog program and the Ubiquiti messages were coming through as normal. Please let me know of any solutions it would be greatly appreciated

| 23 | 4 | %CDP-W-NATIVE_VLAN_MISMATCH | 2018-04-24 | 13:07:3 0 | 172.16.0.16 | Native VLAN mismatch detected on interface gi2.

                    | 249371 |      0 |

| 1 | 6 | DNS_CLI | 2018-09-02 | 03:01:2 2 | C1S2EdgeSwitch-1 | dns_client_txrx.c(711) 995301 %% DNS Client: Failed to s end query packet. Can't reach DNS server at 255.255.255.255. | 249372 | 0 |

On Tue, Apr 24, 2018 at 11:56 AM, Mark Brugnoli-Vinten < notifications@github.com> wrote:

Do you see anything in the syslog_incoming table? If not, check that your syslog daemon configuration is correctly setup to put it into the table.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/Cacti/plugin_syslog/issues/45#issuecomment-383985304, or mute the thread https://github.com/notifications/unsubscribe-auth/Ai8CAxFMxTwZRGD7K-8CxOZhT82dx-_Cks5tr0s8gaJpZM4TgETz .