Networking Forum powered by InfoSec Insitute

Is there a syslog program that can change a specific ip address to a name? Kind of like EEM does with a regular expression, but not on the router itself.

I currently have my routers sending the output from the "show ip ospf neighbor" command to syslog through an EEM applet, but I would like for syslog to change the ip addresses listed in the output to a name. I can list all of the ip addresses and names in a csv file, or format it any way that the program would require.

When I say change IP address to name, I don't necessarily mean the router sending the syslog message. I mean for the output to be listed with a hostname for both the originating router and the neighbor.

If this cannot be done in this way, any suggestion as to how I would accomplish this would be greatly appreciated.

Example:

current:

Code: Select all

10.1.1.1   0   FULL/DROTHER  00:00:01   10.1.1.2  FastEthernet0/0

Desired:

Code: Select all

SuperRouter   0   FULL/DROTHER  00:00:01  SuperRouter2   FastEthernet0/0

[ristau5741]

you'd probably need
a script to find and replace
IP addresses

with host names you can
reprocess your syslog files
with the script to produce

the desired output.

the pro version of splunk can so this is I remember correctly

Most any NMS on the market will also input your syslog data and tie the message to a device based on the IP address.

If you enable it you can have the 'show ip ospf nei' output show the router names using the 'ip ospf name-lookup' command.

https://supportforums.cisco.com/docs/DOC-22044