Remote syslog server is not receiving messages

Symptom

The syslog messages are not received on the remote syslog server.

Cause
One or more of the following might be possible causes:

  • The remote syslog server is not running.

  • The remote syslog server is not reachable from the switch through the specified VRF.

  • The source IP is set for the syslog protocol which is not reachable from the syslog server within the specified VRF.

  • The remote syslog server has an improper configuration.

  • An incorrect TLS Certificate is used in case the switch is in TLS mode.

Action
  1. Verify that the remote syslog server is running. Refer to the documentation for your remote syslog server.
  2. Test the reachability of the remote syslog server from the switch by using ping over the specific VRF.
  3. Test the reachability of the remote syslog server from the source IP of the syslog protocol over the specific VRF.
  4. Verify that the remote syslog server is configured to receive remote syslog messages. Refer to the documentation for your remote syslog server for more information.
  5. Make sure that the peer certificate is valid and as per the remote server configuration.