A Syslog server centrally receives and stores messages from network devices, preserving a historical record for review, troubleshooting, and event correlation. section 7.1.3 section 7.0
Configure Cisco IOS devices to send messages to a server by:
- Specifying the server address with logging host ip-address. section 7.3
- Controlling messages sent to the server with logging trap. section 7.3
- Using UDP port 514 for standard Syslog or TCP port 6514 for Syslog over TLS. section 7.3
Centralized device logging
A router can send events such as interface-state changes, login successes, and configuration changes to a centralized Syslog server while also displaying or buffering them locally. section 7.1
