Deployment Guide

Fabric OS Message Reference 3
53-1003140-01
Overview of system messages
1
Fabric OS v7.3.0 generates component-specific Audit messages.
Event auditing is a configurable feature, which is by default disabled. You must enable event
auditing using the auditCfg
--enable command to send the events to a configured remote host.
Syslogd must be configured for logging audit messages. You can set up filters to screen out
particular classes of events using the auditCfg command. The defined set of Audit messages is
sent to the configured remote host in the Audit message format, so that they are easily
distinguishable from other syslog events that may occur in the network. For details on how to
configure event auditing, refer to “Configuring event auditing” on page 15. For more details, refer to
“Displaying Audit messages” on page 19 and “Reading an Audit message” on page 24.
FFDC messages
First Failure Data Capture (FFDC) is used to capture failure-specific data when a problem or failure
is noted for the first time and before the switch reboots, or trace and log buffer get wrapped. All
subsequent iterations of the same error are ignored. This critical debug information is saved in
nonvolatile storage and can be retrieved using the supportSave command. The FFDC data is used
for debugging or analyzing the problem. FFDC is intended for use by Brocade technical support.
FFDC is enabled by default. Execute the supportFfdc command to enable or disable FFDC. If FFDC
is disabled, the FFDC daemon does not capture any data, even when a message with an FFDC
attribute is logged.
The following is an example of the FFDC message.
2000/12/17-08:30:13, [SS-1000], 88, SLOT 6 | FFDC | CHASSIS, INFO, DCX,
supportSave has uploaded support information to the host with IP address
192.0.2.2.
Message severity levels
Table 2 shows the four levels of severity for system messages, ranging from CRITICAL (1) to INFO
(4). In general, the definitions are wide ranging and are to be used as general guidelines for
troubleshooting. For all cases, you must look at each specific error message description thoroughly
before taking action.
5 Fabric You can audit Administration Domain-related changes.
6 FW You can audit Fabric Watch (FW)-related changes.
7 LS You can audit Virtual Fabric (Logical Switch)-related changes.
8 CLI You can audit the CLI commands executed on the switch.
9 MAPS You can audit Monitoring and Alerting Policy Suite (MAPS)-related
changes.
N/A RAS Used to audit or track the RASLog messages or modules that are
enabled or disabled using the rasAdmin command.
NOTE: The RAS class is not configurable, and it is always enabled
internally.
TABLE 1 Event classes (Continued)
Operand Event class Description