Allied Telesis AT-S63 User Manual

Page 218

Advertising
background image

Chapter 11: Event Logs and the Syslog Client

218

Section II: Advanced Operations

11. Type 4 to toggle Message Format between the following options:

Normal
Sends the severity, module, and description for each event.

Extended
Sends the same information as Normal along with the date, time, and
switch’s IP address. This is the default.

12. Type 5 to select Facility Level.

The following prompt is displayed:

Enter Facility level (0-DEFAULT, 1-LOCAL1, 2-LOCAL2, 3-
LOCAL3, 4-LOCAL4, 5-LOCAL 5, 6-LOCAL6, 7-LOCAL7) -> [0
to 7] ->

This parameter adds a facility level to the entries when they are sent to
the syslog server. The facility level is a numerical code that you can
use to help group entries on the syslog server according to the module
or switch that produced them. This grouping can help you determine
which events belong to which device when a syslog server is collecting
events from several network devices. You can specify only one facility
level.

There are two approaches to using this parameter. The first is to use
the 0-DEFAULT setting which is based on the functional groupings as
defined in the RFC 3164 standard. The numerical codes applicable to
the AT-S63 Management Software and its modules are shown in
Table 3.

Table 3. Applicable RFC 3164 Numerical Code and AT-S63 Module

Mappings

Numerical

Code

RFC 3164 Facility

AT-S63 Module

4

Security and
authorization
messages

Security modules:
- PSEC
- PACCESS
- ENCO
- PKI
- SSH
- SSL
- MGMTACL
- DOS

Authentication modules:
- SYSTEM
- RADIUS
- TACACS+

Advertising