cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2677
Views
1
Helpful
1
Replies

About syslog severity and how to setup

Arijit007
Level 1
Level 1

Hi,

I am new to networking. I have questions on syslog severity. Now below is the chart that i got from cisco website.

Q1> If I chose to send severity 6 logs then will it send informational logs along with it's 0-5 severity logs to syslog server?? Or only information logs will be sent? 

Q2> What kind of logs are sent in informational logs? What is the recommended one to choose? 

Q3> Can we choose to send all type logs to syslog server? is it recommended? Will it affect any system performance? 

Q4>Also what is the log type for below and will it be sent to syslog server if severity chosen 6? 

%IOSXE_INFRA-6-PROCPATH_CLIENT_HOG: IOS shim client 'chasfs' has taken 252 msec (runtime: 252 msec) to process a 'stack chasfs fd' message

 

 

Log severity table- 

Level KeywordLevelDescriptionSyslog Definition

emergencies

0

System unstable

LOG_EMERG

alerts

1

Immediate action needed

LOG_ALERT

critical

2

Critical conditions

LOG_CRIT

errors

3

Error conditions

LOG_ERR

warnings

4

Warning conditions

LOG_WARNING

notifications

5

Normal but significant condition

LOG_NOTICE

informational

6

Informational messages only

LOG_INFO

debugging

7

Debugging messages

LOG_DEBUG

1 Reply 1

Richard Burts
Hall of Fame
Hall of Fame

Q1- if you specify severity level 6 for sending logs to the server then Informational and all other more severe levels (0 5) will be sent.

Q2- it is difficult to say what is included and much easier to say what is not included in level 6, which is debug output. This is a common choice in specifying what logs should be sent to the syslog server. Some people want to reduce the load on the syslog server and specify severity levels below 6. We do not know anything about your environment and what severity level is appropriate for you.

Q3- For most environment sending syslog messages to a server does not take much processing power and does not consume much bandwidth. There are certainly some situations where this is not the case (especially if severity level 7 was chosen). We do not have enough information to know how it would impact your situation.

Q4- if you specify severity 6 that log message would be sent to the server.

HTH

Rick