Technical data

ServerIron ADX Administration Guide 65
53-1002434-01
Using Syslog
1
The device writes the messages to a local buffer that can hold up to 100 messages. You also can
specify the IP address or host name of up to six syslog servers. When you specify a syslog server,
the Brocade device writes the messages both to the system log and to the syslog server.
Using a syslog server ensures that the messages remain available even after a system reload. The
Brocade device’s local syslog buffer is cleared during a system reload or reboot, but the syslog
messages sent to the syslog server remain on the server.
The syslog service on a syslog server receives logging messages from applications on the local host
or from devices such as a router or switch. Syslog adds a time stamp to each received message
and directs messages to a log file. Most Unix workstations come with syslog configured. Some third
party vendor products also provide syslog running on NT.
Syslog uses UDP port 514 and each syslog message thus is sent with destination port 514. Each
syslog message is one line with syslog message format. The message is embedded in the text
portion of the syslog format. There are several subfields in the format. Keywords are used to
identify each subfield, and commas are delimiters. The subfield order is insensitive except that the
text subfield should be the last field in the message. All the subfields are optional.
Configuring logging
You can enable or disable logging, configure the size of the local log buffer, and specify a Syslog
server, by entering the logging command.
To disable logging of SNMP traps to a locally saved event log, enter the following command.
ServerIronADX(config)# no logging on
To re-enable logging, enter the following command.
ServerIronADX(config)# logging on
By default, a message is logged whenever a user logs into or out of the CLI’s User EXEC or
Privileged EXEC mode. To disable logging of users’ CLI access, enter the following command.
ServerIronADX(config)#no logging enable user-login
To specify two third-party Syslog servers to receive Syslog messages in addition to the device’s local
Syslog buffer, enter commands such as the following.
ServerIronADX(config)# logging 10.0.0.99
ServerIronADX(config)# logging 209.157.23.69
To change the logging facility from the default facility user to local7, enter the following command.
ServerIronADX(config)#logging facility local7
To disable logging of debugging and informational messages, enter commands such as the
following.
ServerIronADX(config)#no logging buffered debugging
ServerIronADX(config)#no logging buffered informational
Syntax: [no] logging on I enable I<ip-addr> I facility <value> I buffered <level> I console
The <level> parameter can be alerts, critical, debugging, emergencies, errors, informational,
notifications, or warnings. All message levels are enabled by default. You can disable message
levels individually. The <num-entries> can be 1 – 100. All message levels are logged by default.
The default local buffer capacity is 50 entries
Possible facility values include: