4

Can I tail the log on a Cisco Router? I have 'logging buffered 51200' and a debug running. I can see the packets with 'show log'. Can I tail this?

Kyle Brandt
  • 83,619
  • 74
  • 305
  • 448
  • 1
    If you need to jump quickly to the last lines of the log, `term length 0` before `sh log`. – petrus Sep 11 '11 at 12:23

3 Answers3

9

Sure, run logging monitor debug (or any other level) then terminal monitor.
Log will be displayed on your (and only your) Telnet/SSH session.
If you are connected using the console port, use logging console.

This will enable a behaviour similar to tail -f.

MediumBrownToast
  • 5
  • 3
radius
  • 9,633
  • 25
  • 45
  • To clarify a bit, "logging monitor " set globally the level, then "terminal monitor" enable session per session to display log on the terminal (using the globally defined level). – radius Sep 11 '09 at 06:29
  • This is a tail -f rather than a tail, I'm not sure what the original poster had in mind. – Aaron Aug 02 '11 at 14:35
2

Sending to syslog is the better way to do, but here's a trick you might find useful:

You can do "show logging | begin regexp" and it will show you the log starting at any lines matching that regexp.

That way, if you have your logs being time-stamped (you do, right?) You can something like:

show logging | begin ^Sep 3*

(note there is a double space after "Sep" but this text editor eats it) and it will show you all logs starting from September 3rd, for example.

Requires some experimentation to get it right. :)

DictatorBob
  • 1,644
  • 11
  • 15
1

The best way to do this is to set a syslog host and by sending data log to it you can watch events in realtime. You could also try adjusting the console messages with logging console debug

Ali Mezgani
  • 3,850
  • 2
  • 24
  • 36