Extreme Networks ExtremeWare XOS 11.3, Руководство пользователя

Страница: 199 / 698

Event Management System/Logging
ExtremeWare XOS 11.3 Concepts Guide
199
and
syslog
targets are disabled on the backup MSM, as they are handled on the primary. If the
condition for the
primary-msm
target is met by a message generated on the backup, the event is sent to
the primary MSM.
Note that the
backup-msm
target is active only on the primary MSM, and the
primary-msm
target is
active only on the backup MSM.
Filtering Events Sent to Targets
Not all event messages are sent to every enabled target. Each target receives only the messages that it is
configured for.
Target Configuration
To specify the messages to send to an enabled target, you will set a message severity level, a filter name,
and a match expression. These items determine which messages are sent to the target. You can also
configure the format of the messages in the targets. For example, the console display target is
configured to get messages of severity info and greater, the NVRAM target gets messages of severity
warning
and greater, and the memory buffer target gets messages of severity
debug-data
and greater.
All the targets are associated by default with a filter named DefaultFilter , that passes all events at or
above the default severity threshold. All the targets are also associated with a default match expression
that matches any messages (the expression that matches any message is displayed as
Match : (none)
from the command line). And finally, each target has a format associated with it.
To display the current log configuration of the targets, use the following command:
show log configuration target {console | memory-buffer | nvram | primary-msm | backup-
msm | session | syslog {<ipaddress> | <ipPort> | vr <vr_name>} [local0 ... local7]}
To configure a target, you use specific commands for severity, filters, and formats. In addition, you can
configure the source IP address for a syslog target. Configuring the source IP address allows the
management station or syslog server to identify from which switch it received the log messages. To
configure the source IP address for a syslog target, use the following command:
configure log target syslog [all | <ipaddress> | <ipPort>] {vr <vr_name>} {local0 ...
local7} from <source-ip-address>
The following sections describe the commands required for configuring filters, formats, and severity.
Severity
Messages are issued with one of the severity levels specified by the standard Berkeley Software
Distribution (BSD) syslog values (RFC 3164)—
critical
,
error
,
warning
,
notice
, and
info
—plus three
severity levels for extended debugging—
debug-summary
,
debug-verbose
, and
debug-data
. Note that
RFC 3164 syslog values
emergency
and
alert
are not needed because
critical
is the most severe
event in the system.