Cactiusers.org

Is CactiEZ setup to receive syslog information from remote hosts? I'm trying to get snmp traps setup on a few windows boxs and a snap server, but the only thing showing up in my syslogs is from localhost.

Syslog != snmp trap
They are 2 totally different things.
Do you have a receiving snmp trap server on the Cacti box which is converting the snmp traps to syslog?

Personally I directly send windows Event Log messages as syslog messages using NTSyslog.

I guess that's the part I'm not understanding. I thought they were one in the same.

At my office somebody had setup a cactiez server to monitor our cisco routers. The person is no longer with the company and I have inherited the box. The server hardware has become quite flaky and I'm afraid I'm going to have to move cacti to another server. The biggest piece of the puzzle for me is figuring out how he got the router traps to syslog. I manage the routers and I don't see anything out of the ordinary in their configuration.

Thanks for your help jimmy, I feel like I at least have been pointed in some direction.

Well, you can have your cisco routers export to a syslog instead of traps.

You will probably have to open UDP 514 on the CactiEZ box to allow the syslog messages in.

http://www.brandonhutchinson.com/Remote_Cisco_logging.html
http://www.cisco.com/en/US/docs/ios/11_0/debug/command/reference/dintro.html

OK, that does look familiar. All we have logging to syslog are cisco routers. I was seeing "trap" in the command and my brain was thinking snmp trap and not syslog. Don't I feel dumb now?

Don't you have UDP 514 open both ways by default on CactiEZ? I could have sworn I saw it in the firewall rules.

Possibly, I couldn't remember and didn't want to load up my test VM server.

FYI - NTSyslog does not play nice with XP home edition. Haven't tried Pro, but I suspect it works fine.