[NEBULA] XGS1930-28 - Badly formatted Syslog feed

matteosaitta

Hello,

I have a minor issue with my syslog feed out of a nebula managed XGS1930-28 switch. The switch syslog events uses the event date as the device name(compared to the ip address used while the device is not under nebula) so it's hard for me to find the events on my rsyslog history.

Here is a sample event:

1 2019-08-30T15:59:02.811421+02:00 2019-08-30 - - - 2019-08-30 13:59:01 XGS1930 switch: Cloud: Set IP 192.168.10.2 on VLAN 1 by Local

The firmware is up to date.

Zyxel_Jason

Dear @matteosaitta ,

The screenshot below is what I test in my local office.

192.168.3.40 is a XGS1930 Switch in standalone mode.

192.168.3.38 is another XGS1930 Switch in cloud mode.

In my Syslog server, the message shows similar between standalone mode and cloud mode.(UTC+0 time + event)

Also, the IP address of each Switch shows correctly in the Host column.

Hope it helps.

matteosaitta

My syslog server relies on the declared hostname rather than the ip address as your syslog server does, so there are some issues. I have opened a service request and will continue troubleshooting there.