Management and Configuration Guide K/KA/KB.15.15

By specifying both a severity level and system module, you can use both configured settings to
filter the Event Log messages you want to use to troubleshoot switch or network error conditions.
CAUTION: After you configure a syslog server and a severity level and/or system module to filter
the Event Log messages that are sent, if you save these settings to the startup configuration file by
entering the write memory command, these debug and logging settings are automatically
re-activated after a switch reboot or power recycle. The debug settings and destinations configured
in your previous troubleshooting session will then be applied to the current session, which may not
be desirable.
After a reboot, messages remain in the Event Log and are not deleted. However, after a power
recycle, all Event Log messages are deleted.
If you configure a severity level, system module, or both to temporarily filter Event Log messages,
be sure to reset the values to their default settings by entering the no form of the following commands
to ensure that Event Log messages of all severity levels and from all system modules are sent to
configured syslog servers:
HP Switch(config)# no logging severity
[ debug | major | error | warning | info ]
HP Switch(config)# no logging system-module system-module
Configuring a syslog server
Syslog is a client-server logging tool that allows a client switch to send event notification messages
to a networked device operating with syslog server software. Messages sent to a syslog server can
be stored to a file for later debugging analysis.
To use the syslog feature, you must install and configure a syslog server application on a networked
host accessible to the switch. For instructions, see the documentation for the syslog server application.
To configure a syslog service, use the logging syslog-ip-addr command as shown below.
When you configure a syslog server, Event Log messages are automatically enabled to be sent to
the server. To reconfigure this setting, use the following commands:
• debug
Specifies additional debug message types.
• logging
Configures the system module or severity level used to filter the Event Log messages sent to
configured syslog servers. (See “Configuring the severity level for Event Log messages sent to
a syslog server” (page 424) and “Configuring the system module used to select the Event Log
messages sent to a syslog server” (page 424).)
To display the currently configured syslog servers as well as the types of debug messages and the
severity-level and system-module filters used to specify the Event Log messages that are sent, enter
the show debug command (See “Debug/syslog configuration commands” (page 401).)
Syntax
[ no ] logging syslog-ip-addr
Enables or disables syslog messaging to the specified IP address. You can configure
up to six addresses. If you configure an address when none are already configured,
this command enables destination logging (syslog) and the Event debug type.
Therefore, at a minimum, the switch begins sending Event Log messages to
configured syslog servers. The ACL, IP-OSPF, and/or IP-RIP message types are also
Debug/syslog operation 415