Guest

Preview Tool

Cisco Bug: CSCvu10442 - FMC: Syslogs are not including the year as part of the timestamp

Last Modified

Jun 16, 2020

Products (1)

  • Cisco Firepower Management Center

Known Affected Releases

6.2.3 6.5.0 6.6.0

Description (partial)

Symptom:
According to RFC 5424 year is part of the timestamp and must be included when syslogs are generated by any device,

https://tools.ietf.org/html/rfc5424

TIMESTAMP       = NILVALUE / FULL-DATE "T" FULL-TIME
      FULL-DATE       = DATE-FULLYEAR "-" DATE-MONTH "-" DATE-MDAY
      DATE-FULLYEAR   = 4DIGIT
      DATE-MONTH      = 2DIGIT  ; 01-12
      DATE-MDAY       = 2DIGIT  ; 01-28, 01-29, 01-30, 01-31 based on
                                ; month/year

However, syslogs generated by the FMC doesn't include the year, only month and day, example:

LOCAL1.INFO: May  4 15:15:43 stevego-vFMC SF-IMS[5227]: [31934] sftunneld:sf_ssl [INFO] Initiate IPv4 connection to 10.88.240.52 (via eth0)\n

Conditions:
FMC
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.