CR1000A remote logging?

Mike386
Enthusiast - Level 2

If one goes to the Remote Administration page, and enables "system logging", one is prompted for two IP addresses, one for Remote System Host, and the other for Remote Security Host. Both these entries also have a notification level setting associated with them.

This all implies that the CR1000A will log syslog messages (UDP port 514) to the chosen log server(s). I configured my CR1000A to send logging messages to a linux box with syslog enabled on that port.  I see no messages being logged to that host, and the documentation doesn't give any details about what's required for Remote * Host.

Any hints about what I may be missing here? Thanks.

Labels (1)
1 Solution
Cang_Household
Community Leader
Community Leader

It does work for me. But only the System Log and GUI login logs are being sent over. There are no Firewall logs.

I am doing on RPI 4B+. In /etc/rsyslog.d/local-enable.conf

# enable TCP syslog reception
$ModLoad imtcp
$ModLoad imudp
$TCPServerRun 514
$UDPServerRun 514

 I have G1100, G3100, CR1000A, and my Cisco main router all sending to this pi.

View solution in original post

2 Replies
Cang_Household
Community Leader
Community Leader

It does work for me. But only the System Log and GUI login logs are being sent over. There are no Firewall logs.

I am doing on RPI 4B+. In /etc/rsyslog.d/local-enable.conf

# enable TCP syslog reception
$ModLoad imtcp
$ModLoad imudp
$TCPServerRun 514
$UDPServerRun 514

 I have G1100, G3100, CR1000A, and my Cisco main router all sending to this pi.

jpiszcz
Contributor - Level 1
I see the same thing, my G1100 sends the firewall logs and the CR1000A does not. The only thing I have seen with the CR1000A is when I change the LED settings or the syslog messages during a reboot:

Jun 23 19:08:00 localhost user 2023 Jun 23 19:08:00 : [SYS] LED dim on(led pattern: )
Jun 23 19:08:56 localhost user 2023 Jun 23 19:08:56 : [SYS] LED dim on(led pattern: )
0 Likes
Reply