Syslog

CONFIGURE > SERVICES > Syslog

Administrative users can specify multiple external servers to which the Syslog can be exported via TCP or UDP. There is a drop-down on each serial port to enable the logging and to define the “scope” of logging.

The Syslog page lists any previously added external syslog servers.

Add a New Syslog Server

Note:The combination of server address, protocol and port should be unique. There can be no duplicates. However, the same server could be used if the other entry is an IPv6 address to the same Syslog server.

Use the following procedure to add a new Syslog Server.

  1. Navigate to CONFIGURE > SERVICES > Syslog.

  2. Click the Add Syslog Server button. The Add Syslog Server form opens.

  3. In the Description field, add a suitable description that will help to identify the new server.

  4. Enter the Server Address.

  5. Click the Protocol switch to select either UDP or TCP.

  6. Enter the correct Port. If no port is entered, UDP defaults to port 514 and TCP defaults to 601.

  7. From the drop-down list, select the required severity level to be logged, eight levels of log severity are supported.

  8. Click Add to complete the process.

Global Serial Port Settings

Global Serial Port Settings will define the Facility used and the Severity of all Syslog serial port activity sent from this node. There are two setting functions, Facility, and Severity. From the drop-down menus, select the preferred Facility and Severity as required.

Global Serial Port Settings Tab - Field Definitions

Configure > Services > Syslog > Global Serial Port Settings

Field Definition
Description Unique, familiar text description or name given to this syslog server that users will recognize.
Server Address The IP address of the syslog server you are using for logging.
Protocol Click to select the required protocol for data transmission to the syslog server.
Port The Syslog Server IP address.
Minimum Log Severity Level Log entries with a value equal or greater than the level specified are sent to the server.
Send Serial Port Logs Click to enable serial port logging.
Add Button Click to initiate the syslog, wait for confirmation banner.

Syslog Facility Definitions

Facility Definition
Kern Kernel messages
User User-level messages
Mail Mail system
Daemon System daemons
Auth Security/authentication messages
Syslog Messages generated internally by syslogd
lpr Line printer subsystem
News Network news subsystem
uucp UUCP subsystem
Cron Clock daemon
Authpriv Security/authentication messages
ftp FTP daemon
Local Locally used facilities

Syslog Severity Definitions

Severity Definition
0- Emergency System is unusable.
1 - Alert Action must be taken immediately.
2 - Critical Critical conditions.
3 - Error Error conditions.
4 - Warning Warning conditions.
5 - Notice Normal but significant conditions.
6 - Info Informational messages
7- Debug Debug-level messages

Edit or Delete an Existing Syslog Server

To edit an existing syslog server, click the hyperlinked Red Text server name in the server list (see the Syslog page image on the previous page). Make the required changes, then click the Submit button.

Delete a server by clicking the Delete icon at the top-right of the Edit Syslog Server page.