Configuring Syslog Servers - Cisco ASR 5000 Series Administration Manual

System Logs
...
Thu May 11 15:35:25 2017 Internal trap notification 1361 (DisabledEventIDs) Event IDs from
100 to 1000 have been disabled by user adminuser context context privilege level security
administrator ttyname tty address type IPV4 remote ip address 1.2.3.4
...
Mon May 15 10:14:56 2017 Internal trap notification 1362 (LogLevelChanged) Logging level
of facility sitmain is changed to critical by user staradmin context local privilege level
Security Administrator ttyname /dev/pts/1 address type IPV4 remote ip address 161.44.190.27
Save the configuration as described in the Verifying and Saving Your Configuration chapter.

Configuring syslog Servers

Information generated by the run time event logging filters can be transmitted to a syslog server for permanent
storage.
Important
Important
Use the following example to configure syslog servers:
configure
context local
Notes:
• ip_address specifies the IP address of a system log server on the network in IPv4 dotted-decimal or IPv6
• A number of keyword options/variables are available for the logging syslog command. Refer to the
• Repeat as needed to configure additional syslog servers. There is no limit to the number of syslog servers
Save the configuration as described in the Verifying and Saving Your Configuration chapter.
Configuring Active Logs
Active logs are event logs that are operator configurable on a CLI instance-by-CLI instance basis. Active logs
configured by an administrative user in one CLI instance are not displayed to an administrative user in a
different CLI instance. Each active log can be configured with filter and display properties that are independent
of those configured globally for the system. Active logs are displayed in real time as they are generated.
The data transmitted to the syslog server is meant to be used for informational purposes. Functions such
as billing and performance monitoring should not be based on syslogs.
Although the system provides the flexibility to configure syslog servers on a context-by-context basis, it
is recommended that all servers be configured in the local context in order to isolate the log traffic from
the network traffic.
logging syslog ip_address
end
colon-separated-hexadecimal notation.
Context Configuration Mode Commands chapter in the Command Line Interface Reference for more
information.
that can be configured.
ASR 5500 System Administration Guide, StarOS Release 21.4
Configuring syslog Servers
171