Clearing the audit messages, Configuring event auditing, Understanding the raslog messages – Brocade Network OS Message Reference v4.1.1 User Manual
Page 35: Raslog messages
Network OS Message Reference
19
53-1003227-01
Understanding the RASLog messages
1
4 AUDIT,2011/08/26-07:51:36 (GMT), [DCM-2002], INFO, DCMCFG,
admin/admin/127.0.0.1/rpc/cli,, VDX6720-24, Event: noscli exit, Status:
success, Info: Successful logout by user [admin].
[...]
Clearing the Audit messages
To clear the Audit log messages for a particular switch instance, perform the following steps.
1. Log in to the switch as admin.
2. Execute the clear logging auditlog command to clear all messages on the switch memory.
Configuring event auditing
The Audit log classes SECURITY, CONFIGURATION, and FIRMWARE are enabled by default. You can
enable or disable auditing of these classes using the logging auditlog class class command.
To configure and verify the event auditing, perform the following steps.
1. Execute the configure terminal command to access the global configuration level of the CLI.
switch# configure terminal
Entering configuration mode terminal
2. Configure the event classes you want to audit. For example, to audit the CONFIGURATON class,
execute the following command.
You can choose one of the following event classes: CONFIGURATION, FIRMWARE, or SECURITY.
switch(config)# logging auditlog class CONFIGURATION
3. Execute the show running-config logging auditlog class command to verify the configuration.
switch# show running-config logging auditlog class
logging auditlog class CONFIGURATION
Understanding the RASLog messages
This section provides information about reading the RASLog messages.
RASLog messages
The following example shows the format of a RASLog message.
The following example shows the sample messages from the error log.
2011/08/23-22:58:10, [IPAD-1000], 2,, INFO, VDX6720-24, SW/0 Ether/0 IPv4 DHCP
10.24.95.252/20 DHCP On.
2012/05/30-21:26:00, [FCOE-1035], 67, M1 | DCE, INFO, sw0, Virtual FCoE port 1/1/4
is online.
2011/08/26-12:39:02, [HAM-1007], 2, FFDC, CRITICAL, VDX6720-24, Need to reboot the
system for recovery, reason: raslog-test-string0123456-raslog.