Technical data

74 ServerIron ADX Administration Guide
53-1002434-01
Using Syslog
1
Warning HTTP match-list <matching-list> with
compound pattern1 <start> and
pattern2 <end> Alert: bring server up
and Extract message:
<text-between-start-and-end-pattern>
Indicates that an HTTP content verification health check
has matched a set of selection criteria specified in a up
compound statement.
When the selection criteria is found in the HTML file
used for the health check, the ServerIron ADX marks
port 80 (HTTP) on the real server ACTIVE.
<matching-list> is the name of the matching list whose
selection criteria was matched.
<start> is the beginning of the selection criteria.
<end> is the end of the selection criteria.
Warning Port <TCP/UDP-portnum> on server
<name>: <ip-addr>: Avg response time
<num> exceeded lower threshold
The application port on the real server did not respond
within the warning threshold time.
The <TCP/UDP-portnum> is the application port number.
The <name> is the real server name.
The <ip-addr> is the real server IP address.
The <num> is the average number of milliseconds it was
taking the application port to respond.
Warning Port <TCP/UDP-portnum> on server
<name>: <ip-addr>: Avg response time
<num> exceeded upper threshold;
Bringing down the port...
The application port on the real server did not respond
within the shutdown threshold time.
The <TCP/UDP-portnum> is the application port number.
The <name> is the real server name.
The <ip-addr> is the real server IP address.
The <num> is the average number of milliseconds it was
taking the application port to respond.
Notification Module was inserted to slot <slot-num> Indicates that a module was inserted into a chassis slot.
The <slot-num> is the number of the chassis slot into
which the module was inserted.
Notification Module was removed from slot
<slot-num>
Indicates that a module was removed from a chassis
slot.
The <slot-num> is the number of the chassis slot from
which the module was removed.
Notification L4 max connections <num> reached Indicates that the maximum number of connections
supported by the ServerIron ADX has been reached.
The <num> indicates the number of connections.
Notification L4 TCP SYN limits <num> reached Indicates that the maximum number of connections per
second allowed by the ServerIron ADX has been reached.
The <num> indicates the number of connections.
Notification L4 server <ip-addr> <name> max
connections <num> reached
Indicates that the maximum number of connections
allowed on a real server has been reached.
The <ip-addr> is the real server’s IP address.
The <name> is the name of the real server.
The <num> indicates the number of connections.
Notification L4 begin-holddown source-ip
<src-ip-addr> dest-ip <dst-ip-addr>
Indicates that the ServerIron ADX’s SYN attack
prevention feature is “holding down” the specified
source and destination IP address pair, which means the
ServerIron ADX is not sending these packets to any
servers.
TABLE 4 Brocade Syslog messages (Continued)
Message
Level
Message Format Explanation