Huawei equipment and syslog daemon
by tnk on Jul.08, 2008, under Huawei, Linux, Networking
So how easy is it to set a specific event to be sent over network to unix-like syslog.
Actually on huawei equipment there is a “info-center” component handling all this no matter if it is SNMP or syslog. Both types are configured basically the same (configuration is well described in the “Operation manual”). Of course there are some small catches (as always). The procedure follows following steps:
- enable the info-center component
- undo info-center source default channel to loghost – which basically says that the logging will not go to localhost
- set ip address of the syslog server and severity of the messages that will be sent
- set which messages will be sent (protocol/severity level)
So switch configuration will look something like this:
in system-view
[Switch] info-center enable
[Switch] undo info-center source default channel loghost
[Switch] info-center loghost 202.38.1.10 facility local4
[Switch] info-center source arp channel loghost log level informational debug
state off trap state off
On the linux side you have to have syslog (or syslog-ng if you want) And your configuration should be similar to the following:
# mkdir /var/log/Switch
# touch /var/log/Switch/information
# Switch configuration messages
local4.info /var/log/Switch/information
(alternate accordingly on your system)
- restart your syslog daemon
That’s it nothing more for the linux syslog and huawei equipment. Of course you can gain a lot of interesting information and combinations. But this was just for light starter.
