How to send messages from a XMG1915-10E to a syslogserver

Louis2

I am probably overlooking something, but I do not manage to forward alarms from my XMG1915-10E to my GrayLog VM.

It should be so simple …

Do here my initial setup

• I did select all possible alarms all levels for a start and testing
• I defined a syslog server
• And assumed that the facility number is corresponding with the index number as related to the syslog server (but that is no where documented)
• I also tried local use 0
• I assume that the messages will be forwarded from the switch management IP
• And forwarding to a not existing syslog server in the management IP vlan I am using for this switch

Since I did not receive any message on my GrayLog VM (also not when switching a port on and off, or login and out), I looked at the data stream with wireshark .. all nothing.

So I am probably overlook something …. but I did not manage ….

Pleas help

PS, using the latest firmware version

Zyxel_Melen

Hi @Louis2,

https://download.zyxel.com/XMG1915-10E/handbook/XMG1915-10E_2023.1.pdf

Your configuration is the same as our handbook, so could you help to check if your switch can reach the Graylog VM? You may access Menu > Maintenance > Diagnostic to do ping test.

P.S. VM NIC setting should be bridge or the switch might not be able to access VM.

Zyxel_Melen

Hi @Louis2,

https://download.zyxel.com/XMG1915-10E/handbook/XMG1915-10E_2023.1.pdf

Your configuration is the same as our handbook, so could you help to check if your switch can reach the Graylog VM? You may access Menu > Maintenance > Diagnostic to do ping test.

P.S. VM NIC setting should be bridge or the switch might not be able to access VM.

Louis2

Yep could be reached as expect ping times < 1 ms

And the good news is it seems to work! Note I have only one alarm type 'authentication: HTTP(s) user admin login'

despite selecting all possible events 0-7 however it proofs that the communication is working