HP Aruba 2930F Series, Management And Configuration Manual

Page: 521 / 775

Configuring a syslog server
Syslog is a client-server logging tool that allows a client switch to send event notification messages to a
networked device operating with syslog server software. Messages sent to a syslog server can be stored to a file
for later debugging analysis.
To use the syslog feature, you must install and configure a syslog server application on a networked host
accessible to the switch. For instructions, see the documentation for the syslog server application.
To configure a syslog service, use the
logging < syslog-ip-addr >
command as shown below.
When you configure a syslog server, Event Log messages are automatically enabled to be sent to the server. To
reconfigure this setting, use the following commands:
•
debug
Specifies additional debug message types (see Debug messages on page 517).
•
logging
Configures the system module or severity level used to filter the Event Log messages sent to configured
syslog servers. (See
Configuring the severity level for Event Log messages sent to a syslog server on
page 524 and Configuring the system module used to select the Event Log messages sent to a
syslog server on page 525.)
To display the currently configured syslog servers as well as the types of debug messages and the severity-level
and system-module filters used to specify the Event Log messages that are sent, enter the
show debug
command (See Debug/syslog configuration commands on page 510).
Syntax:
[no] logging < syslog-ip-addr >
Enables or disables syslog messaging to the specified IP address. You can configure up to six addresses. If you
configure an address when none are already configured, this command enables destination logging (syslog) and
the Event debug type. Therefore, at a minimum, the switch begins sending Event Log messages to configured
syslog servers. The ACL, IP-OSPF, and/or IP-RIP message types are also sent to the syslog servers if they are
currently enabled as debug types. (See
Debug messages on page 517.)
no logging
Removes all currently configured syslog logging destinations from the
running configuration.Using this form of the command to delete the only
remaining syslog server address disables debug destination logging on the
switch, but the default Event debug type does not change.
no logging < syslog-ip-
address >
Removes only the specified syslog logging destination from the running
configuration.Removing all configured syslog destinations with the
no
logging
command (or a specified syslog server destination with the
no
logging < syslog-ip-address >
command) does not delete the syslog
server IP addresses stored in the startup configuration.
Deleting syslog addresses in the startup configuration
Enter a
no logging
command followed by the
write memory
command.
Verifying the deletion of a syslog server address
Display the startup configuration by entering the
show config
command.
Chapter 13 Troubleshooting 521