Chapter 17: Event Log and Syslog Server Commands
260
The second step is to customize the definition by specifying which event
messages generated by the switch are to be sent to syslog server. This is
accomplished with this command. You can customize the definition so
that the switch sends all of its event messages to the server or limit it to
just a selection of events from particular modules in the AT-S62
management software. An alternative method to configuring a
definition is with SET LOG OUTPUT on page 275.
Note
The default configuration for a new syslog server definition specifies
no event messages. The switch will not send events to the syslog
server until you have customized the definition with this command
or SET LOG OUTPUT on page 275.
The OUTPUT parameter specifies the ID number of the syslog server
definition to configure. The range is 2 to 20. The definition must already
exist on the switch. To view the existing definitions and their ID
numbers, refer to SHOW LOG OUTPUT on page 283.
The MODULE parameter specifies the modules whose events you want
the switch to send to the syslog server. The AT-S62 management
software consists of a number of modules. Each module is responsible
for a different part of switch operation and generates its own events. The
MODULE parameter’s ALL option sends the events from all the modules.
You can also specify individual modules, which are listed in Table 4 on
page 279.
The SEVERITY parameter specifies the severity of the events to send to
the server. For example, you might configure the switch to send only
error events of all the modules. Or, you might configure a syslog server
definition so that the switch sends only warning events from a couple of
the modules, such as the spanning tree protocol and the MAC address
table. For a list of severity levels, refer to Table 5 on page 281.
Examples
The following command configures syslog server definition 5 to send all
event messages of all severity levels:
add log output=5 module=all severity=all
The following command configures syslog server definition 3 to send
only those event messages from the enhanced stacking module that
have an error severity level:
add log output=3 module=estack severity=e