Cisco Cisco Expressway 维护手册
If you select Service only the system keeps the CDRs for 7 days, and these CDRs can only be read via the REST API to
the Expressway. If you select Service and logging, the local data is exposed in the Event log, and the CDRs are also
sent as INFO messages to your syslog host.
the Expressway. If you select Service and logging, the local data is exposed in the Event log, and the CDRs are also
sent as INFO messages to your syslog host.
Notes:
■
CDR reporting is best effort and the CDRs cannot be relied upon for accurate billing purposes.
■
The local 7 days worth of CDR data is written to disk. It is preserved over a system restart/reboot, and is
included in the backup/restore process.
included in the backup/restore process.
Publishing Logs to Remote Syslog Servers
Syslog is a convenient way to aggregate log messages from multiple systems to a single location. This is particularly
recommended for peers in a cluster.
recommended for peers in a cluster.
■
You can configure the Expressway to publish log messages to up to 4 remote syslog servers.
■
The syslog servers must support one of the following standard protocols:
—
—
Configuring remote syslog servers
1.
Go to Maintenance > Logging, and enter the IP addresses or Fully Qualified Domain Names (FQDNs) of the
Remote syslog servers to which this system will send log messages.
Remote syslog servers to which this system will send log messages.
2.
For each server address, specify the syslog protocol in the Mode field.
If you select Custom, you can specify the Transport, Port, and Format.
If you select Custom, you can specify the Transport, Port, and Format.
3.
For each server, use the Log level control to select how much detail to send.
The Expressway sends messages of the selected severity and all of the more severe messages.
The Expressway sends messages of the selected severity and all of the more severe messages.
4.
Click Save.
Which Mode should I use?
The Mode option of the Expressway's syslog feature configures several parameters of the outgoing syslog messages.
The following table should help you select the mode that best matches your logging server(s) and network
configuration. Custom allows you the most control over the transport, port, and message format used, and you must
use Custom if you want revocation checking for the syslog server certificate.
The following table should help you select the mode that best matches your logging server(s) and network
configuration. Custom allows you the most control over the transport, port, and message format used, and you must
use Custom if you want revocation checking for the syslog server certificate.
Option in the user
interface
interface
Transport
protocol
protocol
Port number
Message format
Legacy BSD format
UDP
514
IETF syslog format
UDP
514
IETF syslog using
TLS connection
TLS connection
TLS
6514
Custom
Select
UDP, TCP, or
TLS
UDP, TCP, or
TLS
Configurable. We recommend (UDP)
514 or (TCP) 6514
514 or (TCP) 6514
Select Legacy BSD format or
IETF syslog format
IETF syslog format
Table 8 Syslog Mode options
190
Cisco Expressway Administrator Guide