I am working with adding BGP logging to Splunk. This will then show a graphic dashboard with all sessions with status +++
BUT I do not have BGP or knowledge about it, so I have setup an test and I do get logs like this:
.id=*b000001;ebgp=true;established=true;hold-time=3m;input.procid=21;keepalive-time=00:01:00;local.address=10.150.2.1;local.as=100;local.bytes=254;local.capabilities=mp;rr;gr;as4;local.eor=;local.id=192.168.22.1;local.messages=12;output.default-originate=always;output.procid=21;remote.address=10.150.2.2;remote.as=200;remote.bytes=209;remote.capabilities=mp;rr;gr;as4;remote.eor=;remote.id=10.180.0.0;remote.messages=11;remote.refused-cap-opt=false;script=bgp;uptime=00:10:54.210
Problem with this, its just a simple test and do not show real life information.
Are there any one with BGP that can help out? Both v6 and v7
What I need are the output from this command hopefully showing different status:
{
:put [/system resource get version]
/routing bgp session
:foreach id in=[find] do={
:local bgp "$[get $id]"
:set ( "$bgp"->"script" ) "bgp"
:put "$bgp"
}
}
You can post it here or send it to email:
kipofi3506@ukgent.com
