Reference Guide
an encryption protocol over the TCP/IP network protocol and it can be used only with the TCP-based destinations (tcp() and tcp6()). The
default TLS port is 6514. While enabling secure syslog mode, you must specify a port that is configured to receive the log messages
from the switch.
Refer to the following examples to configure syslog server hosts.
To configure an IPv4 secure syslog server to which error log messages are sent:
switch:admin> syslogadmin --set -ip 172.26.26.173 -secure -port 2000
To configure an IPv6 non-secure syslog server:
switch:admin> syslogadmin --set -ip fec0:60:69bc:92:218:8bff:fe40:15c4
To set the syslog facility to LOG_LOCAL2:
switch:admin> syslogadmin --set -facility 2
switch:admin> syslogadmin --show -facility
Syslog facility: LOG_LOCAL2
To display all syslog IP addresses configured on a switch:
switch:admin> syslogadmin --show -ip
syslog.1 172.26.26.173
syslog.2 fec0:60:69bc:92:218:8bff:fe40:15c4
To remove the IP address fec0:60:69bc:92:218:8bff:fe40:15c4 from the list of servers to which error log messages are sent:
switch:admin> syslogadmin --remove -ip fec0:60:69bc:92:218:8bff:fe40:15c4
Using secure syslog CA certificates
Starting with Fabric OS 7.4.0, you can import and export syslog CA certificates.
∙ Use the following command to import syslog CA certificates.
seccertutil import -syslogcacert
∙ Use the following command to delete syslog CA certificates.
seccertutil delete -syslogcacert [<certificate name>]
∙ Use the following command to export syslog CA certificates.
seccertutil export -syslogcacert [-certname <certificate name>]
∙ Use the following command to display the syslog CA certificates.
seccertutil show -syslogcacert
Hostname support for syslogAdmin command
The syslogAdmin command accepts either IP address or hostname as input for the syslog server. The system does not validate the host
name. You must ensure that you enter the correct host name.
∙ Sample commands for hostname and IP address as input:
switch:admin> syslogadmin --set –ip win2k8-58-113
Syslog host name win2k8-58-113 added
switch:admin>
switch:admin> syslogadmin --set –ip 10.20.58.113
Syslog IP address 10.20.58.113 added
Performing Advanced Configuration Tasks
Brocade Fabric OS Administration Guide, 8.0.1
100 53-1004111-02