Western Telematic RSM-16DC, RSM-32DC, RSM-8 manual Criteria for Generating a Syslog Message

Page 94

The Syslog Feature

4.Network Parameters Menu: Access the Network Parameters Menu as described in Section 5.8, then set the following parameters:

a)Syslog IP Address: Determine the IP address for the device that will run the Syslog Daemon, then use the Network Port Configuration menu to define the IP Address for the Syslog Daemon.

b)Syslog Date-Time:If desired, you may wish to enable automatic time/date stamping of all Syslog messages generated by the RSM. This is often useful if your Syslog Daemon does not perform time/date stamping itself.

5.Syslog Daemon: In order to capture messages sent by the RSM, a computer must be running a Syslog Daemon (set to UDP Port 514) at the IP address specified in Step 4 above.

9.2.Criteria for Generating a Syslog Message

Once the RSM is properly configured, Syslog messages will be generated as follows:

1.Data Terminated by NULL Character: Syslog will generate a message whenever a properly configured Buffer Mode Port receives data or text terminated by a NULL character (0x00). The message sent to the Syslog Daemon will contain header information and the event (buffered data or text) captured by the RSM. Note that the event written to the buffer port will also be retained.

If a Buffer Mode Port receives data or text that is not terminated by a NULL character, it will not be sent out as a Syslog message, but will be retained by the buffer, providing the maximum Syslog message size (described in item 2 below) is not exceeded. This prevents the RSM from sending spurious characters that do not represent actual text or data.

2.Maximum Syslog Message Size Reached: Syslog messages are limited to 1024 bytes (including the header). Therefore, if data or text in the buffer exceeds this limit, the queued message will be sent immediately, and the rest of the data will be accumulated and forwarded in another, subsequent message; either when a NULL is detected, or when the accumulated data (plus header) again reaches

1024 bytes.

3.Audit Log: If the System Parameters menu has been used to set the Audit Log feature for the "On - with Syslog" option, then a Syslog message will be sent each time that an Audit Log record is generated. Audit Log records will be generated whenever a user connects or disconnects from a port, whenever a user enters or exits from command mode, and whenever a user session is disconnected due to a time out.

4.The Port Parameters Menus are used to enable/disable the Syslog feature at each port, and also to determine whether or not messages will be sent while a user is connected to the port. As described in Section 5.7.2, the Syslog feature can be set to either send all information captured by the port, or to stop sending messages when a user is connected to that port.

9-2

Image 94
Contents RSM Series Shock Hazard Do Not Enter Lithium Battery Secure RackingDisconnect Power Agency Approvals Table of Contents Configuration Table of Contents List of Figures Intelligent Port Selection Security and Collocation FeaturesIntroduction Capture BufferTypographic Conventions Configuration BackupRSM-8, RSM-16, RSM-16DC, RSM-32 and RSM-32DC Units Bold FontUnit Description Front PanelBack Panel Instrument Back Panel Model RSM-8 Power On/Off Switch Getting Started Quick Hardware InstallationApply Power to the RSM Connect your Control Device to the RSMCommunicating with the RSM Port Status Screen Text Interface RSM-8 Shown Getting Started Connecting Power to the RSM Unit Hardware InstallationDC Powered Units Connecting the Network Cable Connecting Devices to the RSMCommunicating with the RSM Unit ConfigurationText Interface Configuration Web Browser Interface Home Screen Web Browser InterfaceSystem SetUp Ports Configuration MenusDefining System Parameters System ParametersConfiguration Real Time Clock and Calendar Invalid Access Lockout Feature Audit Log Callback Security Configuration Port Access Supervisor AccessUser Accounts Managing User Accounts Viewing User AccountsAdding User Accounts Add User Menu Text Interface RSM-8 ShownConfiguration Modifying User Accounts Deleting User AccountsRS232 Port Configuration 1. RS232 Port ModesPort Configuration Menu Text Interface 2. RS232 Port Configuration Menus Communication SettingsGeneral Parameters Port Mode Parameters AT&C1&D2S0=1&B1&H1&R2Network Services Configuring the Internal Modem Network Configuration Servers and ClientsConfiguration Network Parameters 11 Network Parameters Menu Web Browser InterfaceNetwork Port Parameters 12 Network Port Parameters Menu Web Browser InterfaceConfiguration IP Security IP SecurityConfiguration Configuration Except Net/Mask PairsConfiguration Static Route 15 Static Route Menu Text InterfaceDomain Name Server 17 Nomain Name Server Menu Text Interface19 Snmp Access Menu Text Interface Snmp ParametersConfiguration Ldap Parameters LdapConfiguration Group Membership Value Type Default = DN Ldap Group25 Add Ldap Group Menu Text Interface RSM-8 Shown 27 View Ldap Group Menu Text Interface RSM-8 Shown 29 Modify Ldap Group Menu Text Interface RSM-8 Shown 31 Delete Ldap Group Menu Web Browser Interface 32 Ldap Kerberos Set Up Menu Text Interface Configuration Tacacs Parameters 34 The Tacacs Parameters Menu Text InterfaceConfiguration Radius Parameters 36 The Radius Parameters Menu Text InterfaceConfiguration 38 The Copy Port Parameters Menu Save User Selected Parameters CP 3,5,7-9 EnterStatus Screens Port Status Screen /S Status ScreensPort Diagnostics Screen /SD Port Diagnostics Screen RSM-8 ShownNetwork Status Screen /SN Porttcp Portstatus UsernamePort Parameters Screens /W Port Parameters Screen RS232 Port ShownXx Enter Operation Any-to-Any ModePort Connection and Disconnection Operation Operation 4 Enter EnterDefining Hunt Groups Hunt Group ExamplePassive Mode Buffer Mode Reading Data from Buffer Mode PortsPort Buffers Modem Mode Network Port Numbers Telnet & SSH FunctionsSSH Encryption Configuration Direct Connect FeatureStandard Telnet Protocol, SSH and Raw Socket Telnet & SSH Functions RSM-16 & RSM-16DC Standard Telnet Direct Connection without Password RSM-8SSH Direct Connection with Password RSM-8 RSM-32 & RSM-32DCRaw Socket Direct Connection without Password RSM-8 Raw Socket Direct Connection with Password RSM-8Connection Example Terminating a Direct Connect Session Syslog Feature ConfigurationCriteria for Generating a Syslog Message Testing Syslog Configuration Test Menu Text Interface, Supervisor Mode OnlySnmp Traps 10-1Snmp Trap Message How and When Snmp Traps are SentSnmp Contact Optional Snmp Location Optional Testing the Snmp Trap Function Saving and Restoring Configuration Parameters Sending Parameters to a FileRestoring Saved Parameters Upgrading RSM Firmware 12-112-2 Command Reference Guide Command ConventionsCommand Summary Resident Disconnect Sequence Command SetAudit Log CP Copy RS232 Port Parameters ConnectFormat /C x x Enter Format /CP Enter2 Enter or /D/Y 3 Enter Third Party DisconnectFormat /D/Y x x Enter Erase BufferHelp Reboot System DefaultSet System Parameters Display Site IDSet Network Port Parameters Send SSH KeySet RS232 Port Parameters Read Buffer PW Change PasswordSD Display Port Diagnostics Display Port StatusTest Test Network Parameters UF Upgrade FirmwareUL Unlock Port Invalid Access Lockout Save ParametersFormat /W x Enter Exit Command ModeDisplay Port Parameters Who Format /X EnterWhen not connected When connectedAppendix A. RS232 Port Interface Physical / Environmental Power Appendix B. SpecificationsRS232 Port Interface Connectors Models RSM-32 and RSM-32DCAppendix C. Customer Service Trademark and Copyright Information Trademarks Used in this ManualIndex Tacacs DhcpIndex-2 Index-3 Index-4