Hello I have Brocade VDX and ICX switches and I can't get them to export syslogs out to Splunk. Is there anyone else out there that is doing it and what config in the Brocades are you using to get the logs out?
Thank you,
Frank
In order to receive events on the Brocade Dashboard, All the devices to be monitored have to register Splunk Server as the Syslog recipient. The CLI commands to register for various Brocade devices are provided below
VDX:
Registration process is done using the command
Syntax:
logging syslog-server [Splunk sever IP address]
Set single or multiple syslog IPV4 or IPV6 IP address
logging syslog-server [Splunk sever IP address]
Remove a syslog IP address
no logging syslog-server [Splunk sever IP address]
Show the configured syslog IP addresses
show running-config logging syslog-server
For SA/FC node, the commands apply the configuration to local node only. For Management Cluster node, the command applies the configuration to all the jointed cluster nodes.
ICX devices:
Specifying a Syslog server as Splunk Sever is done using the command To specify a Syslog server, enter a command such as the following
Syntax:
logging host [Splunk sever IP address]
To specify an additional Syslog server, enter the logging host [ip-addr] command again, as in the following example. You can specify up to six Syslog servers.
Remove a syslog IP address - no logging host [Splunk sever IP address]