Specifications

Chapter 11 Network Management
CiscoWorks2000 Voice Management Features
11-18
Cisco IP Telephony Network Design Guide
78-11103-03
Syslog Message Filtering
In addition to System Diagnostic Interface (SDI) filtering, there are two places in
the Syslog Analyzer where you can perform message filtering:
• In the Syslog Analyzer Collector (SAC) process, before the message is sent
to the network
• In the CiscoWorks2000 server, where the administrator can define a custom
report
Note If you set the Syslog filters on the CiscoWorks2000 server, all
defined Syslog messages are sent to the server, thus creating
erroneous network traffic. Cisco recommends that you use the SAC
to create filters prior to sending them to a Syslog server.
The filtering mechanism allows you to define filters that are based on the source,
the facility code, the subfacility codes, severity levels, mnemonic codes, or
patterns in the message. Figure 11-9 shows an example of defining a message
filter in the CiscoWorks2000 administrative interface.