Configure a Syslog Server

You can configure syslog server profiles for device log entry storage. The syslog administrator can then sort messages by facility and see all the ones relating to Extreme Networks devices. The administrator can further sort the messages by IP address and by severity. Syslog server settings can be configured as common objects, from within the network policy workflow, and at the device level. Device-level settings override network policy settings.

Note

Note

Using NTP to synchronize the time stamp on messages from all syslog clients can ensure that all messages reported to the syslog server appear in their proper chronological order. Otherwise, it can be very difficult to interpret a series of events affecting multiple network devices, such as reconnaissance probes and network intrusion exploits. To further ensure synchronicity, as a best practice, have all syslog clients use the same NTP time server. See Configure an NTP Server.

Use this task to configure a syslog server object.

  1. Go to Configure > Common Objects > Management > Syslog Servers.
  2. Select an existing Syslog Server, and then select Edit, or select Add.
  3. Configure the Syslog Server Settings.
  4. To add a syslog server to the table, select Add.

    Use the up or down arrows to reorder the list of syslog servers in the table.

  5. Select an existing syslog IP Address or host name from the Select menu, or select Add.
  6. For Severity, select the log level.
  7. Type the Port number.
  8. Select ADD.
  9. Select SAVE SYSLOG SERVER.
9038986-00 Rev AA