Description
I don't know if this is the appropriate place to post this issue. Apologies in advance.
Regarding the article: K13333: Filtering log messages sent to remote syslog servers (11.x - 15.x)
There are certain changes to be made to the sys config if we want to be able to filter out specific syslog events. i.e.
ENTER: tmsh
modify sys syslog remote-servers none
save sys config
edit sys syslog all-properties
You will enter a vi editor, so use vi commands:
Replace the include none line with the desired syslog filter.
delete line: include none
AT that same line, insert via cut and paste the following text:
include "
filter f_remote_loghost {
level(warn..emerg);
};
destination d_remote_loghost {
tcp("10.7.3.11" port(1468));
udp("10.7.3.11" port(514));
};
log {
source(s_syslog_pipe);
filter(f_remote_loghost);
destination(d_remote_loghost);
};
"
exit the vi editor by saving the file
The issue is, since we want to roll this out to new devices via automation, I am looking for ways to automate this particular change.
I get the sense that this won't be possible with Declarative Onboarding. I am not sure if it is possible with the Imperative model or not since it involves editing the syslog porting of the config file.
It could be scripted outside of those two methods but it would be great to be able to incorporate it in someway either via Postman or Ansible.
Any help ????
Many Thanks,
rjc