Teleport Integration Unit. Configuration Manual
36
5.3.14 Configuring Syslog
Events → Syslog
Syslog
– the standard for sending messages about the events occurring in the
system (logs) used in IP networks. Syslog protocol is simple: when certain events
occur, Teleport sends a short text message, less than 1024 bytes in size, to the
recipient of the message. Messages are sent by UDP (port 514). Syslog is used for
ease of administration and information security.
Certain events may be flexibly adjusted and provided with an appropriate
level of significance is assigned (Events → Event List tab). Levels range from 0 to
7, where 0 is the highest level of significance.
The following range of levels is generally accepted:
(0) Emergency
: the system is inoperable
(1) Alert
: the system requires immediate intervention
(2) Critical
: the state of the system is critical
(3) Error
: error messages
(4) Warning
: warnings about possible problems
(5) Notice
: messages of normal, but important events
(6) Informational
: information messages
(7) Debug
: debugging messages
Such separation of event significance levels allows processing the events in
different ways on the recipient side. For example, messages about level 6 and 7
events can simply be recorded in the event log, while messages about level 0-3 events
will be shown to the operator.
Syslog message format
According to the Syslog standard, the message has the following format:
<significance level> <date and time> <sender's IP address> <message>
Note:
the <date and time> field shows the date and time received by the SNTP
protocol. If no time data is received or SNTP is not configured, the <date and time>
field will show the time in seconds after power supply.
Here is an example to illustrate that: We have a message
,
received over
Wireshark:
