Cisco Systems CL-28826-01 Syslog Servers Policy Page

62-10
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 62 Configuring Logging Policies
Syslog Servers Policy Page
Syslog Servers Policy Page
Use the Syslog Servers page to create, edit, and delete servers that collect log messages from the router.
For more information, see Defining Syslog Servers, page 62-3.
Rate Limit Limits the rate of log messages sent to the syslog server.
•Enable Rate Limit—When selected, the rate limit is enabled. When
deselected, the rate limit is disabled.
•Messages per Sec.—The maximum number of logging messages
that can be sent per second. Valid values range from 1 to 10000.
The default is 10 messages per second.
•Exclude—The types of messages to exclude from the rate limit.
This setting excludes the severity level you select as well as all
messages with a lower severity level number (that is, more severe).
The default is 3 (errors), which excludes all log messages with a
severity level of 3, 2 (critical), 1 (alerts), or 0 (emergencies) from
the rate limit. For more information about severity levels, see
Table 62-1 on page 62-4.
•All Messages—When selected, the rate limit applies to all
messages except console messages.
•Console Messages—When selected, the rate limit applies to
console messages only.
Tip To restore the router’s default rate limit settings, select the
Enable Rate Limit check box, then erase the rate limit value
setting.
Origin ID The origin identifier that is added to the beginning of all syslog
messages sent from this device to the remote syslog server. The origin
identifier is useful in cases where you send output from multiple
devices to a single syslog server.
•ID Type—The type of origin identifier added to the beginning of
each syslog message. Options are:
– IP Address—The IP address of the source device.
– Hostname—The hostname of the source device.
– String—User-defined text.
•Value—Applies only when you select String as the ID type. Enter
the text of the user-defined string. Spaces are permitted, except for
the first character.
Note The origin identifier is not added to messages sent to local
destinations, such as the buffer, the console, and the monitor.
Table62-2 Syslog Logging Setup Page (Continued)
Element Description