cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
67989
Views
25
Helpful
5
Replies

What is Logging Facility Local7

kuldeeprawat
Level 1
Level 1

Pls someone tell me What is Logging Facility Local7.

And all the rest logging features can be set.

Thanks

Irshad

5 Replies 5

robphill
Cisco Employee
Cisco Employee

Logging Facility is the system on the device you want to set logging for (i.e. CDP, SNMP, etc.)

The number shoould be the severity, which is how much information to do you want to see about the facility. 7 is debugging.

See Table 21-1 and 21-2 at

http://www.cisco.com/en/US/products/hw/switches/ps679/products_configuration_guide_chapter09186a008007e7d5.html#38819

Good Luck

paddyxdoyle
Level 6
Level 6

Hi,

The logging facility is an identification of a syslog packet that allows a syslog deamon to send the syslog message to the correct log file

The file syslog.conf on a unix server designates which log files syslog messages with a certain facility are sent.

For example, Cisco Works creates a seperate syslog file for all syslog messages sent with a facility of LOCAL7 based on the following config from the syslog.conf file on the server

# Added for Cisco Syslog Analyzer (begin)

local7.emerg;local7.alert;local7.crit;local7.err;local7.warning;local7.notice;lo

cal7.info;local7.debug /var/log/syslog_info

So potentially, if you wanted to, you could configure say routers to use LOCAL7 and log to /var/log/router_syslog and then switches to LOCAL6 and log to /var/log/switch_syslog.

Hope this makes sense

Paddy

olumide
Level 1
Level 1

This logging facility of 7 (Local7) represents the "network news subsystem" (see table below) which is used when network devices create syslog messages.

 

The Facility value is a way of determining which process of the machine created the message. Since the Syslog protocol was originally written on BSD Unix, the Facilities reflect the names of UNIX processes and Daemons.

 

As per RFC5424;

 

Numerical             Facility
             Code

              0             kernel messages
              1             user-level messages
              2             mail system
              3             system daemons
              4             security/authorization messages
              5             messages generated internally by syslogd
              6             line printer subsystem
              7             network news subsystem
              8             UUCP subsystem
              9             clock daemon
             10             security/authorization messages
             11             FTP daemon
             12             NTP subsystem
             13             log audit
             14             log alert
             15             clock daemon (note 2)
             16             local use 0  (local0)
             17             local use 1  (local1)
             18             local use 2  (local2)
             19             local use 3  (local3)
             20             local use 4  (local4)
             21             local use 5  (local5)
             22             local use 6  (local6)
             23             local use 7  (local7)

              Table 1.  Syslog Message Facilities

Ref: https://tools.ietf.org/html/rfc5424

 

Hope this helps.

 

Cheers

This was incredibly helpful!