Fabric OS Message Reference v6.4.0 (53-1001767-01, June 2010)
Table Of Contents
- Contents
- About This Document
- Introduction To System Messages
- RASLog Messages
- AG System Messages
- AN System Messages
- AUTH System Messages
- ANV System Messages
- BKSW System Messages
- BL System Messages
- BLL System Messages
- BLS System Messages
- BM System Messages
- C2 System Messages
- CDR System Messages
- CEE CONFIG System Messages
- CER System Messages
- CHASSIS System Messages
- CNM System Messages
- CONF System Messages
- CTAP System Messages
- CVLC System Messages
- CVLM System Messages
- DAUTH System Messages
- EM System Messages
- ESS System Messages
- ESWCH System Messages
- EVMD System Messages
- FABR System Messages
- FABS System Messages
- FBC System Messages
- FCMC System Messages
- FCIP System Messages
- FCOE System Messages
- FCPD System Messages
- FCPH System Messages
- FCR System Messages
- FICON System Messages
- FICU System Messages
- FKLB System Messages
- FLOD System Messages
- FSPF System Messages
- FSS System Messages
- FSSM System Messages
- FW System Messages
- HAM System Messages
- HAMK System Messages
- HIL System Messages
- HLO System Messages
- HMON System Messages
- HSL System Messages
- HTTP System Messages
- IBD System Messages
- IBPD System Messages
- ICPD System Messages
- IPAD System Messages
- IPS System Messages
- ISCS System Messages
- ISNS System Messages
- KAC System Messages
- KSWD System Messages
- KTRC System Messages
- L2SYS System Messages
- LACP System Messages
- LANCE System Messages
- LFM System Messages
- LOG System Messages
- LSDB System Messages
- MFIC System Messages
- MPTH System Messages
- MQ System Messages
- MS System Messages
- MSTP System Messages
- NBFS System Messages
- NS System Messages
- NSM System Messages
- ONM System Messages
- PDM System Messages
- PDTR System Messages
- PLAT System Messages
- PMGR System Messages
- PORT System Messages
- PS System Messages
- PSWP System Messages
- RAS System Messages
- RCS System Messages
- RKD System Messages
- RMOND System Messages
- RPCD System Messages
- RTWR System Messages
- SAS System Messages
- SCN System Messages
- SEC System Messages
- SFLOW System Messages
- SNMP System Messages
- SPC System Messages
- SPM System Messages
- SS System Messages
- SSM System Messages
- SULB System Messages
- SWCH System Messages
- SYSC System Messages
- SYSM System Messages
- TAPE System Messages
- TRCE System Messages
- TRCK System Messages
- TS System Messages
- UCST System Messages
- UPTH System Messages
- WEBD System Messages
- XTUN System Messages
- ZEUS System Messages
- ZOLB System Messages
- ZONE System Messages
- Audit Log Messages
- AUDIT AG System Messages
- AUDIT AN System Messages
- AUDIT AUTH System Messages
- AUDIT BLS System Messages
- AUDIT CNM System Messages
- AUDIT CONF System Messages
- AUDIT CVLM System Messages
- AUDIT FCIP System Messages
- AUDIT FICU System Messages
- AUDIT FW System Messages
- AUDIT HTTP System Messages
- AUDIT IPAD System Messages
- AUDIT PORT System Messages
- AUDIT SEC System Messages
- AUDIT SNMP System Messages
- AUDIT SPM System Messages
- AUDIT SULB System Messages
- AUDIT SWCH System Messages
- AUDIT UCST System Messages
- AUDIT ZONE System Messages
2 Fabric OS Message Reference
53-1001767-01
Overview of System Messages
1
• Trace dump, first-time failure detection capture (FFDC), and core dump files can be uploaded
to the FTP server using the supportSave command.
• It is recommended to configure the syslogd facility as a management tool for error logs. This is
particularly important for dual-domain switches because the syslogd facility saves messages
from two logical switches as a single file and in sequential order. See “System Logging Daemon
(syslogd)” on page 3 for more information.
Event Auditing
Event auditing is designed to support post-event audits and problem determination based on
high-frequency events of certain types such as security violations, zoning configuration changes,
firmware downloads, and certain types of fabric events. Fabric OS versions earlier than v5.2.0
generated a subset of messages flagged as AUDIT in the RASLog to identify some of this type of
output in addition to error log messages. In Fabric OS v5.2.0 and later, messages flagged as AUDIT
are no longer saved in the switch’s error logs. Instead, the switch can be configured to stream Audit
messages to the switch console and to forward the messages to specified syslog servers. There is
no limit to the number of audit events.
For any given event, AUDIT messages capture the following information:
• User Name - The name of the user who triggered the action.
• User Role - The access level of the user, such as, root or admin.
• Event Name - The name of the event that occurred.
• Status - The status of the event that occurred: success or failure.
• Event Info - Information about the event.
The five event classes described in the following table can be audited.
Fabric OS v6.4.0 generates component-specific Audit messages see “Audit Log Messages”.
Event auditing is a configurable feature, set to off by default. You must enable event auditing by
configuring the syslog daemon to send the events to a configured remote host using the
syslogIpAdd command. You can set up filters to screen out particular classes of events using the
auditCfg command (the classes include zone, security, configuration, firmware, and fabric). The
TABLE 1
Operand Event Class Description
1 Zone You can audit zone event configuration changes, but not the actual
values that were changed. For example, you may receive a message
that states “Zone configuration has changed,” but the message
does not display the actual values that were changed.
2 Security You can audit any user-initiated security event for all management
interfaces. For events that have an impact on the entire fabric, an
audit is only generated for the switch from which the event was
initiated.
3 Configuration You can audit configuration downloads of existing SNMP
configuration parameters. Configuration uploads are not audited.
4 Firmware You can audit configuration downloads of existing SNMP
configuration parameters. Configuration uploads are not audited.
5 Fabric You can audit Administration Domain related changes.