Syslog Commands

syslog

Syntax

[no] syslog syslog-id

Context

config>log

Description

This command enables the context to configure a syslog target host that is capable of receiving selected syslog messages from the 7705 SAR.

A valid syslog-id must have the target syslog host address configured.

A maximum of 10 syslog IDs can be configured.

No log events are sent to a syslog target address until the syslog-id has been configured as the log destination (to) in the log-id node.

Default

No syslog IDs are defined.

Parameters

syslog-id

the syslog ID number for the syslog destination, expressed as a decimal integer

Values

1 to 10

address

Syntax

address ip-address

no address

Context

config>log>syslog

Description

This command associates the syslog target host IP address with the syslog ID.

This parameter is mandatory. If no address is configured, syslog data cannot be forwarded to the syslog target host.

Only one address can be associated with a syslog-id. If multiple addresses are entered, the last address entered overwrites the previous address.

The same syslog target host can be used by multiple log IDs.

The no form of the command removes the syslog target host IP address.

Default

no address

Parameters

ip-address

the IP address of the syslog target host

Values

ipv4-address a.b.c.d

ipv6-address x:x:x:x:x:x:x:x (eight 16-bit pieces)

x:x:x:x:x:x:d.d.d.d

x: [0 to FFFF]H

d: [0 to 255]D

facility

Syntax

facility syslog-facility

no facility

Context

config>log>syslog

Description

This command configures the facility code for messages sent to the syslog target host.

Multiple syslog IDs can be created with the same target host but each syslog ID can only have one facility code. If multiple facility codes are entered, the last facility code entered overwrites the previous facility code.

If multiple facilities need to be generated for a single syslog target host, then multiple log-id entries must be created, each with its own filter criteria to select the events to be sent to the syslog target host with a given facility code.

The no form of the command reverts to the default value.

Default

local7

Parameters

syslog-facility

the syslog facility name for the event type being sent to the syslog target host. Valid codes are as per RFC 3164, The BSD syslog Protocol.

Values

kernel, user, mail, systemd, auth, syslogd, printer, netnews, uucp, cron, authpriv, ftp, ntp, logaudit, logalert, cron2, local0, local1, local2, local3, local4, local5, local6, local7

level

Syntax

level syslog-level

no level

Context

config>log>syslog

Description

This command configures the syslog message severity level threshold. All messages with a severity level equal to or higher than the threshold are sent to the syslog target host.

Only a single threshold level can be specified. If multiple level commands are entered, the last command will overwrite the previous command.

The no form of the command reverts to the default value.

Default

info

Parameters

syslog-level

the threshold severity level value, as described in Table: Threshold Severity Level Values. See Table: Event Severity Levels for the numeric values associated with the severity levels.

Values

emergency, alert, critical, error, warning, notice, info, or debug

Table: Threshold Severity Level Values

Configured Severity

Definition

Emergency

System is unusable

Alert

Action must be taken immediately

Critical

Critical condition

Error

Error condition

Warning

Warning condition

Notice

Normal but significant condition

Info

Informational messages

Debug

Debug-level messages

log-prefix

Syntax

log-prefix log-prefix-string

no log-prefix

Context

config>log>syslog

Description

This command adds the string prepended to every syslog message sent to the syslog host.

RFC 3164, The BSD syslog Protocol, allows an alphanumeric string (tag) to be prepended to the content of every log message sent to the syslog host. This alphanumeric string can, for example, be used to identify the node that generates the log entry. The software appends a colon (:) and a space to the string and it is inserted in the syslog message after the date stamp and before the syslog message content.

Only one string can be entered. If multiple strings are entered, the last string overwrites the previous string. The alphanumeric string can contain lowercase (a-z), uppercase (A-Z) and numeric (0-9) characters.

The no form of the command removes the log prefix string.

Default

no log-prefix

Parameters

log-prefix-string

an alphanumeric string of up to 32 characters. Spaces and colons (:) cannot be used in the string.

port

Syntax

port value

no port

Context

config>log>syslog

Description

This command configures the UDP port that will be used to send syslog messages to the syslog target host.

The port configuration is needed if the syslog target host uses a port other than the standard UDP syslog port 514.

Only one port can be configured. If multiple port commands are entered, the last entered port overwrites the previously entered ports.

The no form of the command reverts to default value.

Default

no port

Parameters

value

the configured UDP port number used when sending syslog messages

Values

0 to 65535