[NEBULA] XGS1930-28 - Badly formatted Syslog feed

matteosaitta
matteosaitta Posts: 13  Freshman Member
First Comment Friend Collector Fifth Anniversary
edited April 2021 in Nebula

Hello,


I have a minor issue with my syslog feed out of a nebula managed XGS1930-28 switch. The switch syslog events uses the event date as the device name(compared to the ip address used while the device is not under nebula) so it's hard for me to find the events on my rsyslog history.


Here is a sample event:


1 2019-08-30T15:59:02.811421+02:00 2019-08-30 - - - 2019-08-30 13:59:01 XGS1930 switch: Cloud: Set IP 192.168.10.2 on VLAN 1 by Local

The firmware is up to date.

All Replies

  • Zyxel_Jason
    Zyxel_Jason Posts: 411  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula Zyxel Certified Sales Associate

    Dear @matteosaitta ,

    The screenshot below is what I test in my local office.

    192.168.3.40 is a XGS1930 Switch in standalone mode.

    192.168.3.38 is another XGS1930 Switch in cloud mode.

    image.png

    In my Syslog server, the message shows similar between standalone mode and cloud mode.(UTC+0 time + event)

    Also, the IP address of each Switch shows correctly in the Host column.

    Hope it helps.

    Jason

    See how you've made an impact in Zyxel Community this year!
    https://bit.ly/Your2024Moments_Community
  • matteosaitta
    matteosaitta Posts: 13  Freshman Member
    First Comment Friend Collector Fifth Anniversary

    My syslog server relies on the declared hostname rather than the ip address as your syslog server does, so there are some issues. I have opened a service request and will continue troubleshooting there.

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）