Log entries that are forwarded to a destination are formatted in a way appropriate for the specific destination whether it be recorded to a file or sent as an SNMP trap, but log event entries have common elements or properties. All application generated events have the following properties:
A time stamp in UTC or local time.
The generating application.
A unique event ID within the application.
A router name identifying the router instance that generated the event.
A subject identifying the affected object.
A short text description.
The general format for an event in an event log with either a memory, console or file destination is as follows.
nnnn <time> TZONE <severity>: <application> #<event-id> <vrtr-name> <subject> 
<message>
The following is an event log example:
252 2013/05/07 16:21:00.761 UTC WARNING: SNMP #2005 Base my-interface-abc
"Interface my-interface-abc is operational"
The specific elements that compose the general format are described in Table: Log entry field descriptions.
| Label | Description | 
|---|---|
nnnn  | 
The log entry sequence number.  | 
<time>  | 
YYYY/MM/DD HH:MM:SS.SSS  | 
YYYY/MM/DD  | 
The UTC date stamp for the log entry: 
  | 
HH:MM:SS.SSS  | 
The UTC time stamp for the event: 
  | 
TZONE  | 
The timezone (for example, UTC, EDT) as configured by configure log log-id x time-format.  | 
<severity>  | 
The severity levels of the event: 
  | 
<application>  | 
The application generating the log message.  | 
<event-id>  | 
The application’s event ID number for the event.  | 
<vrtr-name>  | 
The router name (vrtr-name, for example, vprn101 or Base), in a format used by the logging system, representing the router instance that generated the event.  | 
<subject>  | 
The subject/affected object for the event.  | 
<message>  | 
A text description of the event.  |