{"id":714,"date":"2013-04-12T23:39:36","date_gmt":"2013-04-12T22:39:36","guid":{"rendered":"http:\/\/www.balajibandi.com\/?p=714"},"modified":"2024-02-18T16:15:40","modified_gmt":"2024-02-18T16:15:40","slug":"syslog-tutorial-with-cisco-device","status":"publish","type":"post","link":"https:\/\/www.balajibandi.com\/?p=714","title":{"rendered":"Syslog Tutorial with Cisco Device."},"content":{"rendered":"

By default, Cisco routers and switches send log messages to the console. We should use a syslog server to contain our logging messages with the\u00a0logging\u00a0<\/span>command. Syslog server is the most popular place to store logging messages and administrators can easily monitor the wealth of their networks based on the received information.<\/p>\n

 <\/p>\n

\"\"<\/p>\n

A syslog message has the following format:<\/p>\n\n\n\n
seq no:timestamp%FACILTY-SEVERITY-MNEMONIC<\/strong>: message text<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

A detail explanation of what this means:<\/strong>
\nseq no\u00a0<\/strong>: This a sequence number of the message, but not by default. for you to know the time the message was sent,\u00a0you\u2019ve got to configure it.
\nTimestamp<\/strong>\u00a0: This means Data and time of the message or event, which also need to be configured
\nFacility<\/strong>\u00a0: The facility to which the message refers.
\nSeverity<\/strong>\u00a0: this a single-digit code from 0 to 7 that shows the severity of the message.
\nMNEMONIC<\/strong>\u00a0: Text string that uniquely describes the message.
\nDescription<\/strong>\u00a0: Text string containing detailed information about the event<\/p>\n\n\n\n\n\n\n\n\n\n\n\n
Level<\/strong><\/td>\nKeyword<\/strong><\/td>\nDescription<\/strong><\/td>\n<\/tr>\n
0<\/td>\nemergencies<\/td>\nSystem is unusable<\/td>\n<\/tr>\n
1<\/td>\nalerts<\/td>\nImmediate action is needed<\/td>\n<\/tr>\n
2<\/td>\ncritical<\/td>\nCritical conditions exist<\/td>\n<\/tr>\n
3<\/td>\nerrors<\/td>\nError conditions exist<\/td>\n<\/tr>\n
4<\/td>\nwarnings<\/td>\nWarning conditions exist<\/td>\n<\/tr>\n
5<\/td>\nnotification<\/td>\nNormal, but significant, conditions exist<\/td>\n<\/tr>\n
6<\/td>\ninformational<\/td>\nInformational messages<\/td>\n<\/tr>\n
7<\/td>\ndebugging<\/td>\nDebugging messages<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Let\u2019s see an example of the syslog message:<\/p>\n\n\n\n
12345: Apr 12 20:00:35.823: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0\/0\/2, changed state to down<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

+\u00a0seq no<\/strong>: 12345
\n+\u00a0T<\/strong>imestamp<\/strong>: Apr 12 20:00:35.823
\n+\u00a0FACILTY<\/strong>: LINEPROTO
\n+\u00a0SEVERITY level<\/strong>: 5 (notification)
\n+\u00a0MNEMONIC<\/strong>: UPDOWN
\n+\u00a0message text<\/strong>: Line protocol on Interface Serial0\/0\/2, changed state to down<\/p>\n

Syslog Configuration<\/span><\/p>\n

The following example tells the device to store syslog messages to a server on 10.10.9.9 and limit the messages for levels 4 and higher (0 through 4):<\/p>\n\n\n\n
Router(config)#logging host 10.10.9.9Router(config)#logging trap 4<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

By default, Cisco routers and switches send log messages to the console. We should use a syslog server to contain our logging messages with the\u00a0logging\u00a0command. Syslog server is the most popular place to store logging messages and administrators can easily monitor the wealth of their networks based on the received information.   A syslog message […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,10,2],"tags":[],"class_list":["post-714","post","type-post","status-publish","format-standard","hentry","category-ccie-sec","category-ccie-rns","category-cisco"],"_links":{"self":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/714","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=714"}],"version-history":[{"count":2,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/714\/revisions"}],"predecessor-version":[{"id":2087,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=\/wp\/v2\/posts\/714\/revisions\/2087"}],"wp:attachment":[{"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=714"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=714"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.balajibandi.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}