WLC syslog message format

[xnoops_netone]

Hi.

I'm trying to setup syslog system to monitor the message from WLC 2500.

Is there any document that explained about syslog format.

For example, how can I know the meaning of "132" as below.

<132>Hostname: *idsTrackEventTask: Jan 21  17:32:23.777: %WPS-4-SIG_ALARM_OFF: sig_event.c:656 AP 68:BC:0C:CB:B6:80 : Alarm  OFF, standard sig Deauth flood, track=per-signature preced=9 hits=500 slot=0  channel=11

[Catalin Sandu]

Hi,

How did you solved this issue ?

[SUNDAY]

<132> is a priority of syslog message. It is calculated as 8 * facility_number + severity. Facilities are defined in RFC5424. As most likely you use local_use facilities, my guess is that 132 converts to local0 facility (8*16) and WARNING severity level (4).