When your devices send syslogs or SNMP traps to the specified probe system, the messages appear automatically in the PRTG web interface. You do not have to complete any further configuration steps to use PRTG as a syslog server or SNMP trap receiver. Step 3: Start collecting syslog or SNMP trap messages from your devices Providing a DNS name that points to the IP address of a whole group might not work for SANs.ĭefault Sensor Settings: Sufficient for the First Configuration For example, if you want to receive syslog or trap messages from a storage area network (SAN), you might have to add a device using the IP address of a specific array member that sends the messages. If you do not add the sensor to a probe device but to a different device, be careful with the configuration: Ensure that the IP address or Domain Name System (DNS) name of the parent device matches the proper sender. Distributing Syslog Receiver and SNMP Trap Receiver sensors over different probes makes the overall performance scalable and gives you flexibility with the data storage location. We recommend that you leave the sensor's default settings unchanged for the first configuration (port, include and exclude filter, warning and error filter) to see what data actually comes in.Īdding the sensor directly to a network device increases its speed in comparison to a filter definition in the sensor settings. Then only messages from this device are processed.Īdd the receiver sensors to the desired device in the usual way, for example, via the device's context menu.
You can also add these sensors directly to the source device. Then you receive all messages from the probe system and can optionally filter for specific sources later. So it is possible to add these sensors to a probe device. Step 1: Add a Syslog Receiver or SNMP Trap Receiver sensorīoth sensors inherit an implicit filter from the IP address of the parent device. You can apply these instructions to both the SNMP Trap Receiver as well as the Syslog Receiver because the setup works in a similar way for both. The main limiting factor for storing syslog and trap messages is the hard disk space on the probe system.įollow the steps below for a sample configuration of Syslog Receiver and SNMP Trap Receiver sensors. Processed messages are stored in an internal, high-performance database on the probe system and are available for review and analysis via the PRTG web interface. You can filter the incoming messages by various parameters so that PRTG only processes specific messages and deletes other data right away. It might be significantly fewer messages. The number of messages PRTG can process actually depends on your configuration and system setup. Under lab conditions, PRTG could handle about 10,000 syslog and trap messages per second on a quad core desktop machine when using a single sensor without filters. Then configure your syslog or SNMP trap–enabled devices to send messages to PRTG. You can create the Syslog Receiver sensors as well as the SNMP Trap Receiver sensors in the usual way via the Add Sensor dialog. PRTG provides two dedicated sensors that work as full-scale syslog and SNMP trap receivers:īecause both the Syslog Receiver and the SNMP Trap Receiver are implemented as common sensors, you do not need to install additional software (for example, you do not need an extra syslog server but only the PRTG web server). Devices trigger these messages for various reasons, such as system events, outages, critical conditions, and many more. SNMP traps are asynchronous notifications from SNMP-enabled devices and can be used to report important incidents and data, just like syslog messages. Many network devices support sending syslogs to communicate informational, analysis, and debugging messages that are intended for network management and security auditing. Syslog is a well-established standard for computer message logging.
HOW TO INSTALL SOFTWARE ON CISCO RECEIVER HOW TO
This section describes a sample configuration for the syslog and SNMP trap receiver and gives you an idea about how to use these features. PRTG is utilizable as a full-scale syslog server and Simple Network Management Protocol (SNMP) trap receiver without having to install additional software.
PRTG Manual: Monitoring Syslogs and SNMP Traps
0 kommentar(er)
