Syslog Level 7

Answered Question
Oct 15th, 2008
User Badges:
  • Blue, 1500 points or more

all,


can someone give me a debug command will enable to give a level 7 syslogs. i tried debug icmp and i'm not sure if this is level 7 syslogs:


Oct 15 18:28:47.111: ICMP: echo reply sent, src 68.139.98.62, dst 10.4.9.229

Oct 15 18:28:50.340: ICMP: echo reply sent, src 68.139.98.62, dst 10.4.9.229

Correct Answer by Istvan_Rabai about 8 years 7 months ago

Hi John,


"*Oct 17 05:59:20.683: %SYS-5-CONFIG_I: Configured from console by console" is a level 5 (notification level) syslog message as "SYS-5-CONFIG_I" indicates.

All debug messages are level 7 syslog messages.


In Cisco IOS there are 8 syslog levels:


7-debugging

6-informational

5-notification

4-warning

3-error

2-critical

1-alarm

0-emergency


You can configure logging on the following devices:


logging console x - logging level to the console port

logging monitor x - logging level to the vty lines

logging buffered x - logging level to the buffer (memory)

logging trap x - logging level to the syslog server


For each device you can configure a different logging level.


If you configure "logging trap 2" or "logging trap critical" then you will get level 0,1 and 2 syslog messages to the syslog server. All other levels will not be sent to the syslog server.

If you configure "logging trap 5" or "logging trap notification" then you will get level 0,1,2,3,4 and 5 syslog messages to the syslog server.


The same applies to the logging conslole, logging monitor and logging buffered commands.


Cheers:

Istvan

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Collin Clark Thu, 10/16/2008 - 07:44
User Badges:
  • Purple, 4500 points or more

If I understand you correctly, you want debugs to go to syslog?


logging trap debugging


Hope that helps

Istvan_Rabai Thu, 10/16/2008 - 11:35
User Badges:
  • Gold, 750 points or more

Hi John,


Yes, your debug output is a level 7 syslog message but it is configured to the "console", which is achieved with the "logging console debugging" command (default).


You can check your logging levels to the different devices by issuing the "show logging" command.


To configure level 7 logging to the syslog server you need to issue the "logging trap debugging" command, as Colin says.

You may also need to configure the ip address of the syslog server: "logging x.x.x.x"


Cheers:

Istvan

johnlloyd_13 Thu, 10/16/2008 - 15:01
User Badges:
  • Blue, 1500 points or more

thanks guys! yes, the router is properly configured for logging to a syslog server. are there other syslog output with the '7' on it? for example there is a level '5' when you do a config on the router:

*Oct 17 05:59:20.683: %SYS-5-CONFIG_I: Configured from console by console

i would need and verify a syslog with a '7.' are there any debug command that would produce this?

Correct Answer
Istvan_Rabai Thu, 10/16/2008 - 20:31
User Badges:
  • Gold, 750 points or more

Hi John,


"*Oct 17 05:59:20.683: %SYS-5-CONFIG_I: Configured from console by console" is a level 5 (notification level) syslog message as "SYS-5-CONFIG_I" indicates.

All debug messages are level 7 syslog messages.


In Cisco IOS there are 8 syslog levels:


7-debugging

6-informational

5-notification

4-warning

3-error

2-critical

1-alarm

0-emergency


You can configure logging on the following devices:


logging console x - logging level to the console port

logging monitor x - logging level to the vty lines

logging buffered x - logging level to the buffer (memory)

logging trap x - logging level to the syslog server


For each device you can configure a different logging level.


If you configure "logging trap 2" or "logging trap critical" then you will get level 0,1 and 2 syslog messages to the syslog server. All other levels will not be sent to the syslog server.

If you configure "logging trap 5" or "logging trap notification" then you will get level 0,1,2,3,4 and 5 syslog messages to the syslog server.


The same applies to the logging conslole, logging monitor and logging buffered commands.


Cheers:

Istvan

Actions

This Discussion