Extreme Networks ExtremeWare 7.2e, Installation And User Manual

Page: 135 / 344

Event Management System/Logging
ExtremeWare 7.2e Installation and User Guide 135
Uploading Events Logs
The log stored in the memory buffer and the NVRAM can be uploaded to a TFTP server. Use the
following command to upload the log:
upload log <host name/ip> <filename> {messages [memory-buffer | nvram]}
{severity <severity> {only}} {starting [date <date> time <time> | date <date>
| time <time>]} {ending [date <date> time <time> | date <date> | time <time>]}
{match <match-expression>} {format <format>} {chronological}
You must specify the TFTP host and the filename to use in uploading the log. There are many options
you can use to select the log entries of interest. You can select to upload only those messages that
conform to the specified:
•
severity
• starting and ending date and time
• match expression
The uploaded messages can be formatted differently from the format configured for the targets, and you
can choose to upload the messages in order of newest to oldest, or in chronological order (oldest to
newest).
Displaying Counts of Event Occurrences
EMS adds the ability to count the number of occurrences of events. Even when an event is filtered from
all log targets, the event is counted. (The exception to this is events of any of the debug severities,
which are only counted when the log debug mode is enabled.) To display the event counters, use the
following command:
show log counters {<event condition> | [all | <event component>] {severity <severity>
{only}}}
Two counters are displayed. One counter displays the number of times an event has occurred, and the
other displays the number of times that notification for the event was made to the system for further
processing. Both counters reflect totals accumulated since reboot or since the counters were cleared
using the
clear log counters
or
clear counters
command.
This command also displays an included count (the column titled
In
in the output). The reference
count is the number of enabled targets receiving notifications of this event without regard to matching
parameters.
The keywords
included
,
notified
, and
occurred
only display events with non-zero counter values for
the corresponding counter.
Output of the command:
show log counters stp.inbpdu severity debug-summary
will be similar to the following:
Comp SubComp Condition Severity Occurred In Notified
------- ----------- ----------------------- ------------- -------- -- --------
STP InBPDU
Drop Error 0 1 0
Ign Debug-Summary 0+ 0 0