Cisco ASA 55xx - syslogs

[matt.niarhakos]

No load balancer.

[hsmith]

Are any logs at all from 5544 working?

[matt.niarhakos]

I only have the 1 ASA pointing to 5544 for syslog.

[hsmith]

Can you try the following command?

Code: Select all

echo "testmessage" | nc localhost 5544

This will send send "testmessage" from localhost to localhost on port 5544.

If you don't have nc installed, please install it with yum install nc

After this is done, you should be able to query for 'testmessage' on your dashboard.

[matt.niarhakos]

Yes. I can see the 'testmessage' in the dashboard. using 'localhost' in the command didn't work. i had to specify the ip 10.10.10.239 (itself)

[rkennedy]

Odd, let's try listening using a tcpdump to see if anything is making it to the interface. Please run the following, and let us know if any information is shown. tcpdump port 5544

If that doesn't work, the Cisco device may be sending to port 514 still since it's the default one. Try following this document to allow NLS to listen on 514. https://assets.nagios.com/downloads/nag ... Server.pdf