Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Hall of Fame Super Silver

Event Severity

Can anyone tell me where a log event's severity is derived from? Looking at log events on either the console of CiscoWorks Syslog Analyzer component shows the severity of a given event. Is that severity contained in the event record itself or derived from a secondary data store cross reference?

I ask because a 3rd part NM vendor's tool is not providing us with severity information for logged Cisco events, thus leading to all events being given equal billing in the tool's console.

If you know the answer, a link to a documentation source or attachment of a "live" log event (captured packet) would be most helpful.

2 REPLIES
Red

Re: Event Severity

The CiscoWorks Syslog Ananlyzer message severity is based on the syslog message itself (it is in the message).

For example, the message below would be a severity 4 message (it is the digit that is right after %CDP):

Jan 5 12:17:21 14.32.100.10 209133: *Jul 23 20:22:28: %CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on FastEthernet0/4 (1), with 14.32.100.11 FastEthernet0/3 (100)

The severity cannot be modified (it is defined in the IOS).

Hall of Fame Super Silver

Re: Event Severity

Thank you, Nadim.

302
Views
9
Helpful
2
Replies
CreatePlease to create content