Skip to main content

Syslog severity levels



Number
Keyword
Description
Attention Required
0
Emergency
System down or unusable
Severe
1
Alert
Immediate  action required
Severe
2
Critical
Critical event
Important
3
Error
Error event
Important
4
Warning
Warning event
Important
5
Notification
Normal (but notable)
Worth to get notified, but not to worry
6
Informational
Normal (only informational)
To inform the admin.
7
Debug
All messages as requested by user debug
Debug


Cisco Syslog protocol Severity levels – Points to remember


·         Syslog messages are required to know the normal events or critical events happening in a cisco switch or router.
·         Severity level’s lowest number i.e. ‘0’ resembles the highest severity or importance.
·         The higher the number, the less important is the message.
·         Cisco syslog default severity: By default, debug ‘7’ is enabled in console. That means, user connected through console to the cisco device can view all the debug messages without enabling the debug.
·         Cisco devices show only the syslog messages keyword not the number. So, it is important to remember the syslog keywords to know the severity.

How to configure syslog message levels?


Service
Command Format
Console
logging console level-name  /  level-number
Monitor
logging  monitor level-name   / level-number
Buffered
logging  buffered level-name   / level-number
Syslog
logging  trap level-name   / level-number

Note that, syslog service is nothing but sending the required or configured syslog messages to an external syslog server.
To enable syslog server, we need to input the below command first before setting the message level.
Logging host IP address / hostname

How to disable the syslog messages in cisco devices?

Simply use the commands with no version.
Examples: no logging console, no logging monitor, no logging buffered and no logging host.


Comments

Popular posts from this blog