Page 3 of 3
Re: Cisco ASA 55xx - syslogs
Posted: Tue Jul 12, 2016 2:42 pm
by matt.niarhakos
No load balancer.
Re: Cisco ASA 55xx - syslogs
Posted: Tue Jul 12, 2016 2:50 pm
by hsmith
Are any logs at all from 5544 working?
Re: Cisco ASA 55xx - syslogs
Posted: Tue Jul 12, 2016 2:53 pm
by matt.niarhakos
I only have the 1 ASA pointing to 5544 for syslog.
Re: Cisco ASA 55xx - syslogs
Posted: Tue Jul 12, 2016 2:59 pm
by hsmith
Can you try the following command?
Code: Select all
echo "testmessage" | nc localhost 5544
This will send send "testmessage" from localhost to localhost on port 5544.
If you don't have nc installed, please install it with
yum install nc
After this is done, you should be able to query for 'testmessage' on your dashboard.
Re: Cisco ASA 55xx - syslogs
Posted: Tue Jul 12, 2016 6:03 pm
by matt.niarhakos
Yes. I can see the 'testmessage' in the dashboard. using 'localhost' in the command didn't work. i had to specify the ip 10.10.10.239 (itself)
Re: Cisco ASA 55xx - syslogs
Posted: Wed Jul 13, 2016 9:36 am
by rkennedy
Odd, let's try listening using a tcpdump to see if anything is making it to the interface. Please run the following, and let us know if any information is shown.
tcpdump port 5544
If that doesn't work, the Cisco device may be sending to port 514 still since it's the default one. Try following this document to allow NLS to listen on 514.
https://assets.nagios.com/downloads/nag ... Server.pdf