Specifications

Syslog Components and Their Use
March 15, 2011 Page 5 of 13
Figure 1 Basic Syslog Scenario
Defaultapplicationsettingsintheexam pleinFigure 1havenotbeenmodified.Therefore,an
emergencymessagetriggeredbyasystemresetduetolossofthemastermoduleisforwardedto
Syslogdestinations.TheCLIrelatedmessagenotifyingthatauserhasloggedinremotelyisalso
forwarded.ConfiguredSyslog
server(s)willreceiveallforwardedmessagessincetheirdefault
severitythresholdisat8(acceptingmessagesatallseveritylevels).
Anymessagesgeneratedbyapplicationsatseveritylevels7and8arenotforwardedinthis
example.Forinstance,forwardingdoesnotoccurforanAAAauthenticationrelateddebugging
messagewith
informationaboutRADIUSaccesslevelprocessingforaparticularuser.Ifatsome
pointintimeitbecomesnecessary,forexample,tologallAAAauthentication relatedmessage
activityandtosaveittoafilesoauthenticationdetailscanbetracked,theadministratorcanallow
thatspecificappl icationto
forwarddebuggingmessagestoaSyslogserver,aswellastothe
consoleandpersistentfilestorage.
Formoreinformationonhowtoconfigurethesebasicsettings,refertoSyslogCommand
Precedenceonpage7,andtheConfigurationExamplesonpage11.
Event A:
Loss of
master module
Event B:
Admin user
telnets into
switch
Event C:
RADIUS
processing
user access
level
Application:
CLI
Severity
6
Notification
Application:
SYSTEM
Severity
1
Emergency
Application:
AAA
Severity
8
Debugging
Logging enabled
for this priority?
Generate
Syslog
Server List
Generate
Syslog
Server List
YES
YES
NO
Events cause
Syslog
messages
Logging enabled
for this priority?
Logging enabled
for this priority?
Syslog
Applications
Component
Loop Through
Syslog Server
List
Server priority
threshold met?
I
n
s
e
r
t
S
y
s
l
o
g
F
a
c
i
l
i
t
y
V
a
l
u
e
YES
Send Syslog
Message
Syslog Server
Component
SYSTEM: Resetting DFE for loss of master module
CLI: User:admin logged in from 121.20.142.190(telnet)