I am trying to configure syslog on my Cisco wireless LAN controllers so I can receive real-time change notification detection, but am unsure which facility to use? I have tried daemon, kern, local4, local7, syslog, and user. None of those are sending syslog messages when I make a configuration change. Below is info pertaining to syslog from the "Show logging" command:
Logging to syslog :
- Syslog facility................................ local4
- Logging of system messages to syslog :
- Logging filter level.......................... notifications
- Number of system messages logged.............. 29
- Number of system messages dropped............. 94
- Logging of debug messages to syslog ........... Disabled
- Number of debug messages logged............... 0
- Number of debug messages dropped.............. 0
- Number of remote syslog hosts.................. 1
- syslog over tls................................ Disabled
- syslog over ipsec.............................. Disabled
- ipsec profile inuse for syslog................. none
- Host 0....................................... x.x.x.x
- Host 1.......................................
- Host 2.......................................
Should the logging filter be set to something less severe than notifications (I am using notifications for IOS devices and seeing the syslog messages for changes, which is why I selected it for the wireless LAN controllers).