Cisco IOS syslog events examples

[DanGus]

Hi everyone!

I'm trying to develop a custom correlation rule for Cisco IOS devices, but I can't find any examples of such events anywhere. I also have no Cisco nearby.

So, here is the 2 types of syslog events I need an example of:

1. Change of logging level
2. Change of authentication logging policy, or something similar.

Can it be done? If so, can someone kindly help me by providing some examples??

Thanks in advance!

[balaji.bandi · Accepted solution]

Depending on the device the Logs will be changed, Like Router/switch/Firewall ? 

or are you looking for only IOS Device?

check IOS messages in the PDF 

https://www.cisco.com/c/en/us/td/docs/ios/15_0sy/system/messages/15sysmg.pdf