Para enviar logs de cacharros Cisco (Switches en nuestro caso) a un syslog remoto.
En cada cacharro …
#term no mon
#conf t
service timestamps debug datetime msec
service timestamps log datetime msec
service sequence-numbers
no logging console
no logging monitor
logging trap debugging (Nivel de detalle (ver mas abajo))
logging buffered errors (Lo pones si quieres que se guarden en el buffer ademas de en la maquina remota)
logging source-interface loopback
logging
El nivel de detalle de los logs es el siguiente:
0 – emergency System unusable
1 – alert Immediate action needed
2 – critical Critical condition
3 – error Error condition
4 – warning Warning condition
5 – notification Normal but significant condition
6 – informational Informational message only
7 – debugging Appears during debugging only
Mas información:
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_55_se/configuration/guide/scg_2960/swlog.html
http://www.joshd.ca/content/how-configure-ciscos-syslog-logging