Configure a Cisco Catalyst 2960 switch to send syslog messages in KSS NG

To receive messages from a syslog-capable device, configure the device to send syslog messages to the designated port on the computer where Kiwi Syslog Server NG (KSS NG) is installed. KSS NG automatically listens for UDP messages on port 514.

You can also enable KSS NG to listen for TCP messages, secure TCP messages, and SNMP traps.

The following example shows how to configure a Cisco Catalyst 2960 switch. To configure other types of devices, see the device manufacturer's instructions.

Message logging must be enabled on the device. On many devices that generate syslog messages, logging is enabled by default.

1. On the Cisco Catalyst 2960 switch, open the Cisco command-line interface and begin a session.
2. Verify that you are in Privileged EXEC mode on the switch. To enter Privileged EXEC mode, use the following command.

   enable

3. Switch to global configuration mode and use the following command.

   configure terminal

4. Verify that logging is enabled. If logging has been disabled, use the following command.

    logging enable

5. Configure the switch to send log messages to KSS NG and use the following command. Replace hostname with the name or IP address of the device where KSS NG is installed.

   logging hostname

6. Limit the messages sent based on severity level and use the following command. Replace level with the severity level you want to use.

   logging trap level

   The device will send messages with the specified level and all levels above it. For example, the level critical sends messages with severity levels of critical, alerts, and emergencies. For more information about severity levels, see Syslog severity levels.

7. Return to Privileged EXEC mode using the following command.

   end

Syslog messages from this device are shown on the KSS NG user display and processed according to the rules that you define. If the console does not show messages from this or other devices, troubleshoot KSS NG.