2 Replies Latest reply on Mar 5, 2018 2:58 PM by Leon Adato

    Cisco syslog messages

    bbeachy2001

      I have about 120 AP's at our high school, and people are roaming around all the time, so I'm getting tens of thousands of flapping messages being logged. Like this:

       

      Mar  5 13:51:08.156: %SW_MATM-4-MACFLAP_NOTIF: Host 3408.bc31.76a5 in vlan 6 is flapping between port Gi3/0/7 and port Po30 (ghs3850-1)

       

      From what I'm reading, it seems like it should be fairly easy to keep these messages from going to the syslog server, but nothing I've tried seems to work.

       

      Here's what I'm using right now:

       

      logging discriminator nolog msg-body includes %SW_MATM-4-MACFLAP_NOTIF* drops flapping

      logging host 10.101.101.101 discriminator nolog

       

      I've tried every combination of rules on the first line I can think of, but nothing seems to make any difference.  I still get all flapping messages on the syslog server (10.101.101.101)

       

      Can anybody tell me what I'm doing wrong?

       

      Thanks,

      Branden