Setting System Log Settings
You can enable or disable logging on the Log Settings page, and select whether to aggregate log messages.
Severity Levels
You can select the events by severity level. Each log message has a severity level marked with the first letter of the severity level concatenated with a dash (-) on each side (except for Emergency that is indicated by the letter F). For example, the log message "%INIT-I-InitCompleted: … " has a severity level of I, meaning Informational.
The event severity levels are listed from the highest severity to the lowest severity, as follows:
- Emergency--System is not usable.
- Alert--Action is needed.
- Critical--System is in a critical condition.
- Error--System is in error condition.
- Warning--System warning has occurred.
- Notice--System is functioning properly, but a system notice has occurred.
- Informational--Device information.
- Debug--Provides detailed information about an event.
You can select different severity levels for RAM and Flash logs. These logs are displayed in the RAM Memory page and Flash Memory page, respectively.
Selecting a severity level to be stored in a log causes all of the higher severity events to be automatically stored in the log. Lower severity events are not stored in the log.
For example, if Warning is selected, all severity levels that are Warning and higher are stored in the log (Emergency, Alert, Critical, Error, and Warning). No events with severity level below Warning are stored (Notice, Informational, and Debug).
To set global log parameters:
- Click Administration > System Log > Logs Settings. The Log Settings page opens.
- Enter the parameters.
- Logging--Select to enable message logging.
- Syslog Aggregation--Select to enable the aggregation of SYSLOG messages and traps. If enabled, identical and contiguous SYSLOG messages and traps are aggregated over an interval of time and sent in a single message. The aggregated messages are sent in the order of their arrival. Each message states the number of times it has been aggregated.
- Max Aggregation Time--Enter the interval of time that SYSLOG messages are aggregated.
- RAM Memory Logging--Select the severity levels of the messages to be logged to RAM.
- Flash Memory Logging--Select the severity levels of the messages to be logged to Flash memory.
- Click Apply. The Running Configuration file is updated.