Specifications

12-4
VPN 3000 Series Concentrator Reference Volume II: Administration and Monitoring
78-13274-01
Chapter 12 Filterable Event Log
Monitoring | Filterable Event Log
Save Log
To save a copy of the current event log as a file on the VPN Concentrator, click the Save Log button.
The browser prompts you for a filename, which must conform to the 8.3 naming convention.
Caution If the filename you enter is the same as an existing file, the browser overwrites the existing file
without asking for confirmation.
To list and manage files on the VPN Concentrator, see the Administration | File Management screen.
Clear Log
To clear the current event log from memory, click the Clear Log button. The Manager then refreshes the
screen and shows the empty log.
Caution The Manager immediately erases the event log from memory without asking for confirmation. There
is no undo feature for this action.
Event Log Format
Each entry (record) in the event log consists of eight or nine fields:
Sequence Date Time Severity Class/Number Repeat (IPAddress)
String
(The IPAddress field only appears in certain events.)
For example:
3 12/06/1999 14:37:06.680 SEV=4 HTTP/47 RPT=17 10.10.1.35
New administrator login: admin.
Event Sequence
The number of the logged entry. Event sequence numbers are sequential (they proceed from lower to
higher) but not consecutive. For example, a series of events could have the following sequence numbers:
1, 2, 4, 7, 8.
Numbering starts or restarts from 1 when the system powers up, when you save the event log, or when
you clear the event log. When the log file wraps after 2048 entries (Model 3015–3080; 256 entries on
Model 3005), numbering continues with event 2049 (or 257) overwriting event 1. The maximum
sequence number is 65536.
Although numbering restarts at 1 when the system powers up, it does not overwrite existing entries in
the event log; it appends them. Assuming the log doesn’t wrap, it could contain several sequences of
events starting at 1. Thus you can examine events preceding and following reboot or reset cycles.
Event Date
The date of the event: MM/DD/YYYY. For example, 12/06/1999 identifies an event that occurred on
December 6, 1999.