Home > Articles > Cisco Network Technology > Network Administration & Support > An Overview of the syslog Protocol

An Overview of the syslog Protocol

Chapter Description

This chapter presents an overview of the syslog protocol and shows you how to deploy an end-to-end syslog system. You'll learn about the syslog architecture as well as the issues in deploying syslog servers in Linux and Windows OSs with a focus on their relevance in a Cisco environment.

Commercial Cisco Products

In addition to the free PFSS, Cisco also offers a syslog server that is integrated into the CiscoWorks suite of network-management products. The syslog server with an advanced reporting engine is part of the Resource Manager Essentials (RME) module of CiscoWorks. The RME offers the following features:

  • Provides web-based applications
  • Maintains a database of current network information
  • Generates a variety of reports that can be used for troubleshooting and capacity planning
  • Periodically retrieves and updates device information, such as hardware, software, and configuration files
  • Automatically records changes made to network devices, making it easy to identify when changes are made and by whom
  • Deploys Cisco software images and views configurations of Cisco routers and switches
  • Links to Cisco.com service and support for Terminal Access Controller (TAC) case management

Because RME has advanced features integrated with the syslog server, it can correlate the syslog events with other functions and provide enhanced reporting.