Brocade Virtual ADX Administration Guide (Supporting ADX v03.1.00) - Manual (Page 57)

Brocade Virtual ADX Administration Guide 45
53-1003249-01
Using Syslog
1
Using Syslog
The Brocade Virtual ADX contains a syslog agent that writes log messages to a local buffer and
optionally to a third-party syslog server. The syslog feature can write messages at the following
severity levels.
The device automatically writes the syslog messages to a local buffer. If you specify the IP address
or name of a syslog server, the device also writes the messages to the syslog server. The default
facility for messages written to the server is “user”. You can change the facility if needed. You also
can change the number of entries that can be stored in the local buffer. The default is 50. The
Brocade Virtual ADX does not have a limit to the number of messages that can be logged on a
remote syslog server.
NOTE
You can specify only one facility.
Severity levels
The syslog agent writes messages to provide information about the following severity levels:
• Emergencies
• Alerts
• Critical
• Errors
• Warnings
• Notifications
• Informational
• Debugging
The device writes the messages to a local buffer that can hold up to 100 messages. You also can
specify the IP address or host name of up to six syslog servers. When you specify a syslog server,
the Brocade Virtual ADX writes the messages both to the system log and to the syslog server.
Using a syslog server ensures that the messages remain available even after a system reload. The
Brocade Virtual ADX local syslog buffer is cleared during a system reload or reboot, but the syslog
messages sent to the syslog server remain on the server.
The syslog service on a syslog server receives logging messages from applications on the local host
or from devices such as a router or switch. Syslog adds a time stamp to each received message
and directs messages to a log file. Most Unix workstations come with syslog configured. Some third
party vendor products also provide syslog running on NT.
Syslog uses UDP port 514 and each syslog message thus is sent with destination port 514. Each
syslog message is one line with syslog message format. The message is embedded in the text
portion of the syslog format. There are several subfields in the format. Keywords are used to
identify each subfield, and commas are delimiters. The subfield order is insensitive except that the
text subfield should be the last field in the message. All the subfields are optional.