Skip to main content

How to configure Cisco Meraki to forward syslogs to LogCentral

Configuring Cisco Meraki with LogCentral is as easy as using Meraki.

Gonzague Dambricourt avatar
Written by Gonzague Dambricourt
Updated this week

Cisco Meraki & LogCentral are both cloud based so integration is extremely simple.

LogCentral & Meraki native integration

You can also do it manually but it is not recommended.

Manual setting of Cisco Meraki syslogs servers

Prerequisites

To manually configure the forwarding of syslogs from a Cisco Meraki network to LogCentral and benefit from our cloud based log storage, you'll need:

1. Get your LogCentral location's information


First, in your LogCentral location, you'll find a "Configuration" section.

Here is how this information is presented in LogCentral's location details:

Note down the IP and the port. In this example 49.12.218.35 is the server address and 15866 is the port.

2. Go to the Meraki Dashboard

  1. Log into your Meraki Dashboard.

  2. Navigate to Network-wide → General.

  3. Scroll to Reporting → Syslog servers.


3. Add your syslog server

  • Click Add a syslog server.

  • Enter:

    • IP Address , as obtained previously (49.12.218.35 in our example but you'll get a different value)

    • Port (15866 in our example)

    • Roles (choose which kind of logs you want to send: Security events, Flows, URLs, VPN, Events, Appliance, Wireless, etc.).


4. Choose log types (roles)

Meraki devices let you filter what gets sent. Common ones are:

  • Security events → IDS/IPS alerts, firewall activity.

  • Flows → Source/destination IP, port, protocol traffic summaries.

  • URLs → Web traffic (MX appliances).

  • VPN → Tunnel status logs.

  • Appliance / Wireless / Switch → Device-specific logs.


5. Save & verify

  • Click Save changes.

  • In your LogCentral location, check if messages arrive with the live log visualization

  • If nothing shows up, double-check firewall/NAT rules and that the correct roles are enabled.

Did this answer your question?