cisco WS-C4506-E ROM: 15.1(1r)SG5 如果屏蔽特定日志？

[GUO]

大家好！我有台cisco WS-C4506-E ROM: 15.1(1r)SG5，日志满满都是如下告警，想屏蔽这类告警，不知道怎么做，求大家指点，谢谢！

Jul 4 15:09:35: %SFF8472-5-THRESHOLD_VIOLATION: Gi1/3/9: Rx power low warning; Operating value: -22.5 dBm, Threshold value: -19.0 dBm.
Jul 4 15:12:23: %SFF8472-5-THRESHOLD_VIOLATION: Te1/2/3: Rx power low alarm; Operating value: -40.0 dBm, Threshold value: -13.9 dBm.

[Leo Laohoo]

Why?  What insane and demented reason is possibly there to block these very helpful error messages? 

First of, these message is a cry for help.  These message means that the links are going bad.  Without any action, the links will degrade over time and eventually fail.  

Sweeping the problems under the rug is not an answer.  

[GUO]

This is a known bug in the firmware of this switch, and it is currently not possible to upgrade the switch firmware, so.

[Leo Laohoo]

---

@GUO wrote:
This is a known bug in the firmware of this switch

---

Post the complete output to the following commands: 

sh interface Gi1/3/9 transceiver details
sh interface Te1/2/3 transceiver details

[GUO]

The command input is as follows

[Leo Laohoo]

The alarms are not bugs. 

It means that whatever optic is at the far/remote/opposite end of Gi1/3/9 & Te1/2/3 is about to fail. 

[GUO]

These two ports have been in use for four to five years, during which the interface configuration and optical module have not been modified. The network traffic is also normal, and there has been no network packet loss or failure. The information of the optical module is as follows:

这两个端口已使用四五年，期间没有修改过接口配置和光模块，网络流量也正常，没有网络丢包或者故障。光模块信息如下：

NAME: "GigabitEthernet1/3/9", DESCR: "1000BaseLH"
PID: GLC-LH-SMD , VID: V01 , SN: AVJ210234GX

NAME: "TenGigabitEthernet1/2/3", DESCR: "SFP-10Gbase-SR"
PID: SFP-10G-SR-S , VID: V01 , SN: AVD2213DJLV

[Leo Laohoo]

The far/remote/opposite end optic's "transmit" laser is burning out.  

Pull out the optic from the port and visually inspect it.  The Tx (left port) should be jet black and "wet" like on the surface.  

[GUO]

Is there any way to block such logs?

有什么办法屏蔽这类日志吗？

[ilay]

T1/2/3收发均为-40，这个接口是不是根本没在用啊？-40是模块的最低阈值了，链路没连接的情况下Rx基本都是-40.确认一下没在用的话就shutdown接口吧

T1/3/9 -22.6单纯就是收光弱了，如果两端都是自己的设备，那么可以在对端同样检查一下设备的模块状态。如果是运营商的线路，可以找一个停机窗口，让运营商挂表测试一下链路。也可以尝试自行更换同型号光模块测试。

光功率检查本身就是保障业务运行的正常手段，还是建议将其恢复到正常的范围内。收光强或者收光弱都非正常的状态，有可能会对正常业务产生影响。

[GUO]

这两个端口已使用四五年，期间没有修改过接口配置和光模块，网络流量也正常，没有网络丢包或者故障。如下截图就是T1/2/3过去一年的接口流量图。

我现在只想屏蔽这两个端口的告警信息。不知道命令怎么敲？

[ilay]

你这个图是t1/0/25的，我只是提醒你这种情况应当排查，至于搞不搞完全看你自己

方法1：通过discriminator 过滤某个关键字：

logging discriminator sfplog msg-body drops SFF8472-5-THRESHOLD_VIOLATION //定义一个过滤器，sfplog是名称，可自行修改，drops后面是包含的字符串信息

logging buffered discriminator sfplog // 应用过滤 sfplog后面可以加log等级，也可以直接回车。

方法2:

将log level直接改到warning（4）这样level 5的日志在buffer中是看不到的。

logging buffered warnings

自己看着选吧

[GUO]

加了这个命令，日志直接没了，不产生日志了

[ilay]

命令给错了，是用drops关键字而非includes，再测试一下效果吧，如果不生效的话就提高logg buffer的level吧。

这玩意儿也有相关的bug，有些版本配置了不生效。bug中包含的版本可能不全，依照实际测试结果为准。

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCur45606

[GUO]

我改drops也是不生效