Page 10-1

10 Switch Logging

Logging Overview

Whether you are troubleshooting, configuring, or simply monitoring the switch, you may find
it useful to view a history of various switch activities. The Logging submenu contains a list of
commands for viewing and configuring logging on the system. To enter the logging submenu,
enter
logging
at the system prompt. Enter a question mark (?) and then press <Enter> to display the follow-
ing list of commands:
Command Logging Menu
syslog Change the syslog parameters (not part of Switch Logging feature).
swlogc Configure Switch Logging source/destination mapping and priority levels.
cmdlog Show UI Command entries in the mpm.log file
conlog Show Connection entries (logins/logouts) entries in the mpm.log file
caplog Show Screen Capture entries in the mpm.log file.
debuglog Show Debug message entries in the mpm.log file
seclog Display Secure Access log file entries.
Commands in the submenu are described here.
System Log Messages
The syslog command is used to configure how system log messages, like diagnostic and error
messages, are handled on the switch. See Configuring the Syslog Parameters on page 10-2.
Switch Logging Parameters
The swlogc and remaining commands in the submenu are part of the Switch Logging feature,
which is a separate logging mechanism. The swlogc command is used for configuring the
logging parameters of various switch activities such as FTP and Telnet, and is described in
Configuring Switch Logging on page 10-6.
The other commands listed in the submenu above are support commands for Switch Logging.
��cmdlog command—displays the UI command entries in the mpm.log file, which is one of
the possible destinations for Switch Logging data. See Displaying the Command History
Entries in the MPM Log on page 10-9.
•conlog command—displays the connection entries in the mpm.log file. See Displaying the
Connection Entries in the MPM Log on page 10-10.
•caplog command—displays the screen capture entries in the mpm.log file. See Displaying
Screen (Console) Capture Entries in the MPM Log on page 10-11.
•debuglog command—shows the debug entries in the mpm.log file. See Displaying Debug
Entries in the MPM Log on page 10-13.
•seclog command—shows the Secure Access violation event entries in the mpm.log file. See
Displaying Secure Access Entries in the MPM Log on page 10-13.