
Using the syslog Facility
B-3
Understanding How
syslog
Filters Messages
The syslog facility forwards router event messages to a remote host only when at
least one entity filter exists for that host. Entities include Bay Networks software
that provides a service, such as TFTP, IP, or the GAME operating system. An
entity filter is a set of criteria that you specify to tell syslog whether to forward an
event message. (Refer to Event Messages for Routers and BNX Platforms for a
complete list of entities for which you can create filters.)
You can define many entity filters for a remote host, and you can define several
different sets of criteria for each entity. For example, you might define two
different APPN filters for the same host.
The criteria that define the entity filter can consist of the following:
• The event number or range of numbers. For example, you might want syslog
to forward only the event messages with event numbers 5 through 50.
• The severity level (warning, fault, trace, informational, or debug).
• The slot or range of slots on which the event occurred. For example, you
might want only the event messages that occur on slot 4, or slots 2 through 4.
Configuring the
syslog
Facility
The steps you must take to configure the syslog facility are as follows:
1. Configure the syslog group parameters.
The group parameters let you
— Enable or disable syslog on the router.
— Specify the number of remote hosts you want to configure for syslog.
— Set the polling cycle.
2. Add at least one remote host for which you want the syslog facility to
filter and forward router event messages.
3. Select a host and add at least one entity filter for that host.
Note: The event number and severity level are mutually exclusive.
Comentarios a estos manuales