cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

CISCO SWITCHES FOR SMALL and MEDIUM BUSINESS

Introducing the next generation of Cisco Small and Medium Business Switches. Cisco is refreshing its SMB Switch portfolio. Click here  to learn more.


316
Views
0
Helpful
4
Replies
naidusadanala
Beginner

Where can I find syslog header for cisco 5520 router ?

Hi , I am receving 5520 data via syslog . I am unable to interpret them .I am new to cisco community . Any one can please send me URL for syslog message header interpretation .

 

Thanks 

1 ACCEPTED SOLUTION

Accepted Solutions
omz
VIP Collaborator VIP Collaborator
VIP Collaborator

General Syslog message format is - 

*Apr 14 09:40:10.326: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up
  • timestamp: Apr 14 0:40:10.326
  • facility: %LINEPROTO
  • severity level: 5
  • mnemonic: UPDOWN
  • description: Line protocol on Interface GigabitEthernet0/1, changed state to up

Below are severity levels - 

  • 0 —emergency: System unusable
  • 1 —alert: Immediate action needed
  • 2 —critical: Critical condition—default level
  • 3 —error: Error condition
  • 4 —warning: Warning condition
  • 5 —notification: Normal but significant condition
  • 6 —informational: Informational message only
  • 7 —debugging: Appears during debugging only

View solution in original post

4 REPLIES 4
omz
VIP Collaborator VIP Collaborator
VIP Collaborator

General Syslog message format is - 

*Apr 14 09:40:10.326: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up
  • timestamp: Apr 14 0:40:10.326
  • facility: %LINEPROTO
  • severity level: 5
  • mnemonic: UPDOWN
  • description: Line protocol on Interface GigabitEthernet0/1, changed state to up
omz
VIP Collaborator VIP Collaborator
VIP Collaborator

General Syslog message format is - 

*Apr 14 09:40:10.326: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up
  • timestamp: Apr 14 0:40:10.326
  • facility: %LINEPROTO
  • severity level: 5
  • mnemonic: UPDOWN
  • description: Line protocol on Interface GigabitEthernet0/1, changed state to up

Below are severity levels - 

  • 0 —emergency: System unusable
  • 1 —alert: Immediate action needed
  • 2 —critical: Critical condition—default level
  • 3 —error: Error condition
  • 4 —warning: Warning condition
  • 5 —notification: Normal but significant condition
  • 6 —informational: Informational message only
  • 7 —debugging: Appears during debugging only

View solution in original post

I have sample as below 

 

May 5 22:35:49 10.8.70.5 kc-bdf-ca10-mpus-wlc1: *Dot1x_MN_MsgTask_4: May 05 22:35:49.293: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:452 Invalid replay counter from client 8c:a9:65:e9:65:5R

Hi there,

Looks like an embedded message:

TimestampMay 5 22:35:49

Source IP10.8.70.5

Source hostnamekc-bdf-ca10-mpus-wlc1

WLC error code*Dot1x_MN_MsgTask_4

PayloadMay 05 22:35:49.293: %DOT1X-3-INVALID_REPLAY_CTR: 1x_eapkey.c:452 Invalid replay counter from client 8c:a9:65:e9:65:5R

 

See @omz message regarding the payload structure.

 

cheers,

Seb.