Cisco Works, SNMP, MIBs.
CraigPardo
New Member
Posts:
24
Joined:
Tue Dec 20, 2011 1:05 am
Certs:
CCNA, Sec+

Changing the ip addresses listed in syslog output to a name.

Tue May 01, 2012 5:59 pm

Is there a syslog program that can change a specific ip address to a name? Kind of like EEM does with a regular expression, but not on the router itself.

I currently have my routers sending the output from the "show ip ospf neighbor" command to syslog through an EEM applet, but I would like for syslog to change the ip addresses listed in the output to a name. I can list all of the ip addresses and names in a csv file, or format it any way that the program would require.

When I say change IP address to name, I don't necessarily mean the router sending the syslog message. I mean for the output to be listed with a hostname for both the originating router and the neighbor.

If this cannot be done in this way, any suggestion as to how I would accomplish this would be greatly appreciated.

Example:

current:
Code: Select all
10.1.1.1   0   FULL/DROTHER  00:00:01   10.1.1.2  FastEthernet0/0


Desired:
Code: Select all
SuperRouter   0   FULL/DROTHER  00:00:01  SuperRouter2   FastEthernet0/0

User avatar
ristau5741
Post Whore
Posts:
9974
Joined:
Tue Aug 21, 2007 2:15 pm
Certs:
Instanity

Re: Changing the ip addresses listed in syslog output to a n

Wed May 02, 2012 7:46 am

you'd probably need
a script to find and replace
IP addresses

with host names you can
reprocess your syslog files
with the script to produce

the desired output.
Tips of the day:
- The human mind is the ultimate creation invention.
- "Emergency Belkin. $40........................Boom."
- "I see" said the blind man pissing into the wind, "it's all coming back to me".
- Sausage time

User avatar
kerpap
Ultimate Member
Posts:
761
Joined:
Sun Jan 04, 2009 6:28 pm
Certs:
CCNA, CCDA, CCNA-SECURITY

Re: Changing the ip addresses listed in syslog output to a n

Wed May 02, 2012 7:56 am

the pro version of splunk can so this is I remember correctly
CCNA, CCDA, CCNA-SECURITY

User avatar
that1guy15
Post Whore
Posts:
3042
Joined:
Thu Apr 29, 2010 6:12 pm
Certs:
CCNP, CCDP, CCIP

Re: Changing the ip addresses listed in syslog output to a n

Wed May 02, 2012 8:20 am

Most any NMS on the market will also input your syslog data and tie the message to a device based on the IP address.
http://blog.movingonesandzeros.net/

User avatar
davidrothera
Ultimate Member
Posts:
992
Joined:
Thu Jan 13, 2011 5:10 pm
Certs:
CCIE R&S #38338, CCNP, CCIP

Re: Changing the ip addresses listed in syslog output to a n

Tue May 08, 2012 5:28 am

If you enable it you can have the 'show ip ospf nei' output show the router names using the 'ip ospf name-lookup' command.

https://supportforums.cisco.com/docs/DOC-22044
---
David
CCIE R&S #38338, CCIP, CCNP

http://networkbroadcast.co.uk - My Blog
http://twitter.com/davidrothera

'

Return to Cisco Network Management

Who is online

Users browsing this forum: No registered users and 3 guests