Syslogs

[Keyurp]

Hello all, can anyone tell me how to interpret syslogs on my router? The first few words are date, time of log. But what does the rest of the stuff mean? Thanks in advance for any help!

[thisisshanky]

To Interpret syslog, you need to understand, two key terms.

1.Facility

2. Level

Facility can be a hardware device, protocol, or module within the system software.

Level - indicates the degree of severity of the message. There are seven different levels.

0 - emergency, 1 - alert, 2- critical, 3 - error, 4- warning, 5 - notification , 6 - informational, 7 - debugging.

The general syslog message format is as follows:

"facility-severity-MNEMONIC:description"

facility will indicate who generated the message (whether hardware or software)

severity will be one of the numbers indicated as above (0-7).

MNEMONIC - This code uniquely identifies the error message. This will be in uppercase characters always.

Description - This describes what event has occured. This varies for different messages.

When you have timestamps on for the syslog, a generic syslog message will look as follows

mm/dd/yyy:hh/mm/ss:facility-severity-MNEMONIC:description

Hope that helps!