Summary

The topics covered in this chapter prepare the Netadmin for deploying a centralized logging facility to collect syslog messages from all the network devices. The Netadmins should be able to perform the following syslog-related tasks:

• Deploy a Linux-based syslog server to support Cisco devices

• Deploy a Microsoft Windows based syslog server

• Centrally log events and alarms generated by Cisco IOS based routers and switches

• Centrally log events and alarms generated by Cisco CatOS based switches

• Centrally log events and alarms generated by Cisco PIX Firewalls

• Centrally log events and alarms generated by Cisco VPN 3000 Series Concentrators.

Table 4-14 provides a list of all the tools discussed in this chapter. The table also provides the source of documentation for each tool.

Table 4-14. Tools Discussed in Chapter 4

Tool	Function	Supported OS	Installable Files	Documentation Sources
Syslogd	UNIX-style syslog	Part of the standard Linux/UNIX OS for handling system and kernel logs	Part of the standard OS; installation not required	man syslogd
Syslog-ng	UNIX-style syslog with advanced filtering capabilities	Linux/UNIX	http://www.balabit.com	http://www.campin.net/var/docs/syslog-ng/html http://www.campin.net/usr/share/doc/syslog-ng/html/book1.html INSTALL and README docs included in the source code
Kiwi Syslogd Server	UNIX-style syslog with e-mails and alerts; also works for Cisco PIX Firewall syslogging	Windows 95, 98, Me, NT 4, 2000, 2003, XP	http://www.kiwisyslog.com	Help file with system management window
PIX Firewall syslog server	UNIX-style syslog; has no GUI; works for Cisco PIX Firewalls as well as other devices	Windows NT4 with SP6, 2000, XP	http://www.cisco.com (user needs cisco.com login)	Documentation file readme.rtf installed with the server
3Com syslog server	UNIX-style syslog	Windows 95/98/NT	http://support.3com.com/software/utilities_for_windows_32_bit.htm	Help file with the GUI