Fabric OS Message Reference v7.0.0 (53-1002149-01, April 2011)

Fabric OS Message Reference 3
53-1002149-01
Overview of system messages
1
Event auditing is a configurable feature, set to off by default. You must enable event auditing by
configuring the syslog daemon to send the events to a configured remote host using the
syslogIpAdd command. You can set up filters to screen out particular classes of events using the
auditCfg command (the classes include zone, security, configuration, firmware, and fabric). The
defined set of Audit messages are sent to the configured remote host in the Audit message format,
so that they are easily distinguishable from other syslog events that might occur in the network. For
details on how to configure event auditing, refer to “Viewing and configuring system message logs”
on page 4.
System logging daemon (syslogd)
The system logging daemon (syslogd) is a process on UNIX, Linux, and some Windows systems that
reads and logs messages as specified by the system administrator.
Fabric OS can be configured to use a UNIX-style syslogd process to forward system events and error
messages to log files on a remote host system. The host system can be running UNIX, Linux, or any
other operating system that supports the standard syslogd functionality. Configuring for syslogd
involves configuring the host, enabling syslogd on the Brocade model, and, optionally, setting the
facility level.
For the Brocade DCX, 24000 and 48000, each control processor (CP) has a unique error log,
depending on which CP was active when that message was reported. To fully understand message
logging on the Brocade 24000 and 48000, you should enable the system logging daemon,
because the logs on the host computer are maintained in a single merged file for both CPs and are
in sequential order. Otherwise, you must examine the error logs in both CPs, particularly for events
such as firmwareDownload or haFailover, for which the active CP changes.
For the Brocade DCX, 24000 and 48000, any security violations that occur through Telnet, HTTP, or
serial connections are not propagated between CPs. Security violations on the active CP are not
propagated to the standby CP counters in the event of a failover, nor do security violations on the
standby CP get propagated to the active CP counters.
For information on configuring the syslogd functionality, refer to the Fabric OS Administrator’s
Guide.
System console
The system console displays messages only through the serial port. If you log in to a switch through
the Ethernet port or modem port, you will not receive system console messages.
The system console displays system messages, Audit messages (if enabled), and panic dump
messages. These messages are mirrored to the system console; they are always saved in one of
the system logs.
You can filter messages that appear on the system console by severity using the errFilterSet
command. All messages are still sent to the system message log and syslog (if enabled).