Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Q about LMS/Solaris syslogd

I see LMS adjusted syslog.conf to receive udp514 => local7.info => /var/log/syslog_info => DB

Does it mean its receiving severity info only or including everything else above (warn, crit, ...) as well?

If not, how can we extend that everithing else above info will receive the LMS syslog till DB and frontends?

thx for hints, Steffen

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Q about LMS/Solaris syslogd

the entry means that syslogd puts all syslog messages it receives with a FACILITY of "local7" and a SEVERITY from "info" upwards into the file /var/log/syslog_info

don't mess up facility with severity, all (there are only very rare exceptions) Cisco devices sends their syslog messages with a facility of "local7" which then can be used on the receiving site to roughly filter the messages by the type of source the message comes from. See this paper for details:

http://www.cisco.com/en/US/technologies/collateral/tk869/tk769/white_paper_c11-557812.html

and all messages with severity  "info" [6] upwards means upto "emergency" [0], so only debugging messages gets dropped.

2 REPLIES

Re: Q about LMS/Solaris syslogd

the entry means that syslogd puts all syslog messages it receives with a FACILITY of "local7" and a SEVERITY from "info" upwards into the file /var/log/syslog_info

don't mess up facility with severity, all (there are only very rare exceptions) Cisco devices sends their syslog messages with a facility of "local7" which then can be used on the receiving site to roughly filter the messages by the type of source the message comes from. See this paper for details:

http://www.cisco.com/en/US/technologies/collateral/tk869/tk769/white_paper_c11-557812.html

and all messages with severity  "info" [6] upwards means upto "emergency" [0], so only debugging messages gets dropped.

New Member

Re: Q about LMS/Solaris syslogd

thx

208
Views
5
Helpful
2
Replies
CreatePlease login to create content