logging

Prev Next

To enable the sending of log messages to one or more syslog servers and specify the severity level of the SNMP traps sent to one or all syslog servers, use the logging command in configuration mode. The trap override option sets, clears, enables, or disables class-specific log level overrides for the specified syslog server.

The no logginghostname command stops sending logs to the specified server. The no logginghostnameprotocol command resets the protocol to the default UDP without changing the port. The no logginghostnameport command resets to the default port, 514, regardless of protocol.

Syntax

logginghostnameprotocol {udp | tcp | tls} [portport_number]

no logginghostname

no logginghostname protocol

logging hostname port port_number

no logging hostname port

[no] logging {hostname [traplevel]}

[no] logginghostname [trap override]

Parameters

hostname

Sends logs to this server using the syslog protocol.

protocol {udp | tcp | tls}

Specifies the protocol to log in to remote host:

  • udp—Specifies rsyslog over UDP.

  • tcp—Specifies rsyslog over TCP.

  • tls—Specifies rsyslog over TLS.

portport_number

Specifies the server port to log in to remote host.

traplevel

Sets the minimum SNMP trap severity level. For example, if you select err, you are also enabling crit, alert, and emerg.

  • none—Disables logging.

  • emerg—System failure.

  • alert—Immediate action required.

  • crit—Critical condition.

  • err—Error condition.

  • warning—Warning of possible problem.

  • notice—Default trap level.

  • info—Informational messages.

  • debug—Debugging information.

trap override

Sets, clears, enables, or disables class-specific log level overrides for the specified syslog server.

Examples

The following example enables the sending of log messages to the specified syslog server address and indicates that error, critical, alert, and emergency log messages are being sent to all syslog servers:

hostname (config) # logging 10.10.20.62 protocol udp port 161
hostname (config) # logging trap err 

The following example clears the override set for the “lms” class for log messages sent to the specified syslog server address:

hostname (config) # no logging 10.10.20.62 trap overrride class lms

User role

Admin

Supported appliances

This command is supported on the following appliances running the specified releases or later:

  • Malware Analysis: Before release 6.4.

  • Central Management System: Before release 6.4

  • File Protect: Before release 6.4

  • File Protect: Before release 6.4.

  • Network Security: Before release 6.4.

  • Intelligent Virtual Execution - Server: Before release 6.4