Syslog Level 7

[johnlloyd_13]

all,

can someone give me a debug command will enable to give a level 7 syslogs. i tried debug icmp and i'm not sure if this is level 7 syslogs:

Oct 15 18:28:47.111: ICMP: echo reply sent, src 68.139.98.62, dst 10.4.9.229

Oct 15 18:28:50.340: ICMP: echo reply sent, src 68.139.98.62, dst 10.4.9.229

[Collin Clark]

If I understand you correctly, you want debugs to go to syslog?

logging trap debugging

Hope that helps

[Istvan_Rabai]

Hi John,

Yes, your debug output is a level 7 syslog message but it is configured to the "console", which is achieved with the "logging console debugging" command (default).

You can check your logging levels to the different devices by issuing the "show logging" command.

To configure level 7 logging to the syslog server you need to issue the "logging trap debugging" command, as Colin says.

You may also need to configure the ip address of the syslog server: "logging x.x.x.x"

Cheers:

Istvan

[johnlloyd_13]

thanks guys! yes, the router is properly configured for logging to a syslog server. are there other syslog output with the '7' on it? for example there is a level '5' when you do a config on the router:

*Oct 17 05:59:20.683: %SYS-5-CONFIG_I: Configured from console by console

i would need and verify a syslog with a '7.' are there any debug command that would produce this?

[Istvan_Rabai · Accepted solution]

Hi John,

"*Oct 17 05:59:20.683: %SYS-5-CONFIG_I: Configured from console by console" is a level 5 (notification level) syslog message as "SYS-5-CONFIG_I" indicates.

All debug messages are level 7 syslog messages.

In Cisco IOS there are 8 syslog levels:

7-debugging

6-informational

5-notification

4-warning

3-error

2-critical

1-alarm

0-emergency

You can configure logging on the following devices:

logging console x - logging level to the console port

logging monitor x - logging level to the vty lines

logging buffered x - logging level to the buffer (memory)

logging trap x - logging level to the syslog server

For each device you can configure a different logging level.

If you configure "logging trap 2" or "logging trap critical" then you will get level 0,1 and 2 syslog messages to the syslog server. All other levels will not be sent to the syslog server.

If you configure "logging trap 5" or "logging trap notification" then you will get level 0,1,2,3,4 and 5 syslog messages to the syslog server.

The same applies to the logging conslole, logging monitor and logging buffered commands.

Cheers:

Istvan