6.2 Network Management  
  6.2.9 Syslog  
The Cisco syslog logging utility is based on the UNIX syslog utility. System events are usually logged to the system console unless disabled. The syslog utility is a mechanism for applications, processes, and the operating system of Cisco devices to report activity and error conditions. The syslog protocol is used to allow Cisco devices to issue these unsolicited messages to a network management station.

Every syslog message logged is associated with a timestamp, a facility, a severity, and a textual log message. These messages are sometimes the only means of gaining insight into some device misbehaviors.

Severity level indicates the critical nature of the error message. There are eight levels of severity, 0-7, with level 0 (zero) being the most critical, and level 7 the least critical. The levels are as follows:

0 Emergencies
1 Alerts
2 Critical
3 Errors
4 Warnings
5 Notifications
6 Informational
7 Debugging

The facility and severity level fields are used for processing the messages. Level 0 (zero) to level 7 are facility types provided for custom log message processing. The Cisco IOS defaults to severity level 6.This setting is configurable.

In order to have the NMS receive and record system messages from a device, the device must have syslog configured. Below is a review of the command line syntax on how to configure these devices.

To enable logging to all supported destinations:

Router(config)#logging on

To send log messages to a syslog server host, such as CiscoWorks2000:

Router(config)#logging hostname | ip address

To set logging severity level to level 6, informational:

Router(config)#logging trap informational

To include timestamp with syslog message:

Router(config)#service timestamps log datetime

 

Web Links

Syslog

http://www.cisco.com/en/US/tech/tk648/ tk362/tk790/tech_protocol_ home.html