Number
|
Keyword
|
Description
|
Attention Required
|
0
|
Emergency
|
System down or unusable
|
Severe
|
1
|
Alert
|
Immediate
action required
|
Severe
|
2
|
Critical
|
Critical event
|
Important
|
3
|
Error
|
Error event
|
Important
|
4
|
Warning
|
Warning event
|
Important
|
5
|
Notification
|
Normal (but
notable)
|
Worth to get notified,
but not to worry
|
6
|
Informational
|
Normal (only
informational)
|
To inform the
admin.
|
7
|
Debug
|
All messages as
requested by user debug
|
Debug
|
Cisco Syslog protocol Severity levels – Points to remember
·
Syslog messages are
required to know the normal events or critical events happening in a cisco
switch or router.
·
Severity level’s lowest
number i.e. ‘0’ resembles the highest severity or importance.
·
The higher the number, the
less important is the message.
·
Cisco syslog default
severity: By default, debug ‘7’ is enabled in console. That means, user
connected through console to the cisco device can view all the debug messages
without enabling the debug.
·
Cisco devices show only the
syslog messages keyword not the number. So, it is important to remember the
syslog keywords to know the severity.
How to configure syslog message levels?
Service
|
Command Format
|
Console
|
logging console level-name
/ level-number
|
Monitor
|
logging monitor level-name / level-number
|
Buffered
|
logging buffered level-name / level-number
|
Syslog
|
logging trap level-name / level-number
|
Note that, syslog service is nothing but sending the required
or configured syslog messages to an external syslog server.
To enable syslog server, we need to input the below command
first before setting the message level.
Logging host IP address / hostname
How to disable the syslog messages in cisco devices?
Simply use the commands with no version.
Examples: no logging console, no logging monitor, no logging
buffered and no logging host.
Comments