[Syslog] [Event List] Source Row is using Device-IP instead of Device-Name

[SchmuFoo]

Hi all,

I'm just wondering how I can map syslog messages to the real Device-Name and also embed that messages in the Event List on specific Devices-Status.php page?

At the Moment on Monitoring-Events.php the Source Row ist showing the IP Address of the incoming syslog messages (activated via System - Services, Port UDP 1514)

Cheers,
Jan

[rickli]

You need to make sure that the source IP correspond with the IP used for discovery (main IP). Then you should see the correct device and syslog events receive a higher level which is mapped from the syslog severity.

[SchmuFoo]

Thanks; I also had to make sure that the (Enterasys) Switches send their SysName instead of the IP.

Code: [Select]

set logging hostname sysName

[SchmuFoo]

Update, only one last switch doesnt "switch" from IP to sysname and it still mapped to a "Class Node Event" (Monitoring-Events.php)

(Also this Device BaseMAC (Enterasys) is listed in nedi.conf under ignoredmac - See https://forum.nedi.ch/index.php?topic=2156.0)

[SchmuFoo]

Update, only one last switch doesnt "switch" from IP to sysname and it still mapped to a "Class Node Event" (Monitoring-Events.php)

(Also this Device BaseMAC (Enterasys) is listed in nedi.conf under ignoredmac - See https://forum.nedi.ch/index.php?topic=2156.0)

Problem gone since changing the Hostnamen on the Switch

[rickli]

Interesting, I've no idea why, but if it works