To enable the sending of log messages to one or more syslog servers and specify the severity level of the SNMP traps sent to one or all syslog servers, use the logging command in configuration mode. The trap override option sets, clears, enables, or disables class-specific log level overrides for the specified syslog server.
The no logginghostname command stops sending logs to the specified server. The no logginghostnameprotocol command resets the protocol to the default UDP without changing the port. The no logginghostnameport command resets to the default port, 514, regardless of protocol.
Syntax
logginghostnameprotocol {udp | tcp | tls} [portport_number]
no logginghostname
no logginghostname protocol
logging hostname port port_number
no logging hostname port
[no] logging {hostname [traplevel]}
[no] logginghostname [trap override]
Parameters
hostname | Sends logs to this server using the syslog protocol. |
protocol {udp | tcp | tls} | Specifies the protocol to log in to remote host:
|
portport_number | Specifies the server port to log in to remote host. |
traplevel | Sets the minimum SNMP trap severity level. For example, if you select err, you are also enabling crit, alert, and emerg.
|
trap override | Sets, clears, enables, or disables class-specific log level overrides for the specified syslog server. |
Examples
The following example enables the sending of log messages to the specified syslog server address and indicates that error, critical, alert, and emergency log messages are being sent to all syslog servers:
hostname (config) # logging 10.10.20.62 protocol udp port 161
hostname (config) # logging trap err
The following example clears the override set for the “lms” class for log messages sent to the specified syslog server address:
hostname (config) # no logging 10.10.20.62 trap overrride class lms
User role
Admin
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Malware Analysis: Before release 6.4.
Central Management System: Before release 6.4
File Protect: Before release 6.4
File Protect: Before release 6.4.
Network Security: Before release 6.4.
Intelligent Virtual Execution - Server: Before release 6.4