logging suppress in ios-xr 7.4.1

[Mollerstrom]

Hi, I hit the bug: CSCvz31771 and try to suppress the log messages:
0/0/ADMIN0:Jan 26 08:58:52.735 CET: envmon[3010]: %PKT_INFRA-FM-4-FAULT_MINOR : ALARM_MINOR :high voltage alarm :DECLARE :0/0: P1V0_BV_VDD_TPS_VOUT J2C

Unfortunately I can not suppress the syslog, Im running 7.4.1 on a 57C3.

I have tested the following without any "match"

logging suppress rule DROP_SYSLOG
alarm PKT INFRA-FM FAULT_MINOR
alarm PKT INFRA FM-4-FAULT_MINOR
alarm PKT INFRA-FM-4-FAULT MINOR
alarm PKT INFRA-FM-4-FAULT P1V0_BV_VDD_TPS_VOUT
!
logging suppress apply rule DROP_SYSLOG
all-of-router
!

!

Any idea what can possible be the problem here, could it be related to 0/0/ADMIN0 ?

Regards Jonas

[pman]

Hi,
Is there a chance you have typo?

---

alarm PKT INFRA

---

While this is what appears to you:

PKT_INFRA

Also, what about logging suppress duplicates?
Maybe you should give it a try.

https://www.cisco.com/c/en/us/td/docs/routers/xr12000/software/xr12k_r5-1/system_monitoring/command/reference/b_sysmon_cr51xxr12k/b_sysmon_cr51xxr12k_chapter_0100.html#wp3752107130

[Mollerstrom]

Hi, 

I added: source location 0/0/ADMIN0 and I had "logging suppress duplicates" since before (should not have anything todo with this)

without success 

logging suppress apply rule DROP_SYSLOG
all-of-router
source location 0/0/ADMIN0
!
logging source-interface Loopback0
logging suppress duplicates

Also:

(config-suppr-rule)#alarm ?
WORD Message category of the suppressed message

(config-suppr-rule)#alarm PKT ?
WORD Group name of suppressed message

%PKT_INFRA-FM-4-FAULT_MINOR

where %  and _ are punctuation marks

=

alarm PKT INFRA-FM FAULT_MINOR

But not sure if it can not be suppressed do to its a ADMIN0 alarm/message, else it looks like a bug

[smilstea]

Can you try with alarm PKT_INFRA FM FAULT_MINOR

A _ is a continuation of a string and a - is a new term.

Thanks,

Sam

[Mollerstrom · Accepted solution]

Hi, I cot information from Cisco, at the moment and there’s no way to filter admin vm logs on calvados.

[Georg-georgopoulos]

Hi there, for those searching for something similar...

this log:

"0/0/ADMIN0:Jan 26 08:58:52.735 CET: envmon[3010]: %PKT_INFRA-FM-4-FAULT_MINOR : ALARM_MINOR :high voltage alarm :DECLARE :0/0: P1V0_BV_VDD_TPS_VOUT J2C"

can be successfully filtered as it follows:

 logging suppress rule DROP_SYSLOG
alarm PKT_INFRA FM FAULT_MINOR

where 

PKT_INFRA is the Category 

FM is the Group

FAULT_MINOR is the message

The format is %Category-Group-severity-Message

BR George

[Georg-georgopoulos]

Don't forget to apply your rule:

logging suppress apply rule <NAME> all-of-routers (or any other choice)