Priority

The priority in a SYSLOG message contains information about the the message severity and the facility (service or component that triggered the message).

The eight severity levels originally defined in SYSLOG have been reduced to five levels in the device. The table below shows the correlation between the alert level, the meaning and the SYSLOG severities.

Priority Meaning SYSLOG severity
Alert This category includes all messages requiring the system administrator's close attention. PANIC, ALERT, CRIT
Error All error messages which can occur under normal conditions are communicated at this level; no special attention is required by the administrator (e.g. connection errors). ERROR
Warning This level communicates messages which do not compromise normal operating conditions. WARNING
Information At this level, all messages are sent that have a purely informational character (e.g. accounting information). NOTICE, INFORM
Debug Communication of all debug messages. Debug messages generate large data volumes and can compromise the device's operation. For this reason they should be disabled for normal operations and only used for troubleshooting. DEBUG

The table below provides an overview of the meaning of all internal message sources that you can set in the device. The final column in the table also provides the default correlation between the internal sources of the device and the SYSLOG facilities. This mapping can be changed, if necessary.

Source Meaning Facility
System System messages (boot events, timer system, etc.) KERNEL
Logins Messages about successful connection and disconnection as well as about login and logout of a user during PPP negotiation as well as errors that occur in the process AUTH
System time Messages about changes to the system time CRON
CLI login Messages about CLI logins (Telnet, Outband, etc.), logouts and any errors that occurred during this. AUTHPRIV
Connections Messages about any errors that occurred during establishment and termination of connections (display trace) LOCAL0
Accounting Accounting information stored after termination of a connection (user, online time, transfer volumes) LOCAL1
Administration Messages on changes to the configuration, remotely executed commands, etc. LOCAL2
Router Regular statistics about the most frequently used services (breakdown per port number) and messages about filtered packets, routing errors, etc. LOCAL3

www.lancom-systems.com

LANCOM Systems GmbH | A Rohde & Schwarz Company | Adenauerstr. 20/B2 | 52146 Wuerselen | Germany | E‑Mail info@lancom.de

LANCOM Logo