Syslog protocol runs in management VRF by default. If you use Ethernet management interface Eth0/1 to connect with the syslog server, you do not need to do the following operations.
However, if the L3 VLAN interface is used to connect with the syslog server, the syslog protocol cannot run normally by default, as all the L3 VLAN interface is in the default VRF by default. You need to modify the configurations to make the L3 VLAN interface management interface and syslog protocol run in the same VRF, so as to run the syslog protocol normally. You can choose either one of the following two ways:
Way 1. Use the command set system management-services vrf default to move syslog protocol to run in the default VRF. This way is recommended. Note that using this command also moves the NTP/TACACS+/RADIUS management services to the default VRF.
Way 2. Use the command set vlan-interface interface <interface-name> vrf mgmt-vrf to move the L3 VLAN interface connected to the syslog Collector to management VRF.
Configuring the Syslog Host
After you configure the syslog server IP address, the log files will be sent to the syslog server.
- Configuration of nodes "system syslog host", "system syslog port-number", and "system syslog port-protocol" have been deprecated in version 2.4.
- It is recommended to configure UDP protocol as the port protocol.
Configuring Syslog for Local Storage
You can configure syslog messages to be stored in RAM or in a local SD card.