
Configuring Syslog Services
308659-14.00 Rev 00
G-13
Syslog includes the upper and lower boundary values as part of this range.
For example, an entity filter for FTP has an event number range with a lower
boundary of 5 and an upper boundary of 27. With this filter, Syslog captures and
forwards to a remote host all FTP log messages with event numbers 5 to 27.
To filter by event number, navigate to the appropriate entity filter and enter:
event-lower-bound
<event_number>
event-upper-bound
<event_number>
event_number
is the lowest-numbered event or the highest-numbered event in the
range of events you want Syslog to capture.
Example:
box# syslog
syslog# log-host/192.168.125.3
log-host/192.168.3.4# filter name telnet-sessions entity telnet
filter/192.168.3.4/telnet-sessions# event-lower-bound 1
filter/192.168.3.4/telnet-sessions# event-upper-bound 52
filter/192.168.3.4/telnet-sessions#
To filter a single event, specify the same event number for the event-lower-bound
and event-upper-bound parameters.
Accepting the default values for the event-lower-bound (0) and event-upper-bound
(255) parameters causes Syslog to use only the severity and slot mask criteria for
capturing and forwarding messages.
Filtering by Event Severity Level
Each event message generated by the router software has one of the following
severity levels:
•Fault
• Warning
• Information
•Trace
•Debug
Comentarios a estos manuales