syslog configuration

[samuel0901]

Hi,

what is the different between facility and severity?

How to customize the facility local7?

Regards,

Samuel

[gpulos]

the severity relates to the 'impact' of the event. (how severe is this event)

the facility relates to the 'name' of an event/process, etc. (what is the facility that is being logged)

for example:

set logging level CDP severity 7

the above command sets the logging level for the facility "CDP", as well as setting the logging severity to 7, aka 'debugging'

the 'logging facilities' LOCAL1 - LOCAL7 are thought of as 'pipes' to the syslog daemon (syslogd) in which syslogd uses the pipes to decide where to send incoming information.

see the following link for 'facility' and 'severity' information:

http://www.cisco.com/en/US/products/hw/switches/ps4324/products_command_reference_chapter09186a00801fd94f.html#wp1024616

see the following link for some 'logging facility' information:

http://www.cisco.com/en/US/products/hw/switches/ps679/products_configuration_guide_chapter09186a008007f79f.html#1020178

[samuel0901]

Hi Qpulos,

I got it.

thanks a lot!!

should rate you 5. how to re-rate it?

Regards,

Samuel

[Richard Burts]

Samuel

The severity level is used to select which types of messages will be sent to the various logging destinations (you can send log messages to the console, to the monitor, to a buffer on the router, and to a syslog server(s)) The severity levels range from level 0 (emergencies) to level 7 (debugging). You can specify a severity level and you will get those messages and everything more severe. You can specify different severity levels for various kinds of logging destinations.

The facility is only used in conjunction with logging messages to a syslog server. You can specify different facility IDs to allow the syslog server to process various types of messages differently.

HTH

Rick

[samuel0901]

Hi rburts,

I got it.

thanks a lot!!

should rate you 5 too. how to re-rate it?

Regards,

Samuel