19-5
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter19 Understanding Lo gging
About Logging
Local Store Target
Log messages in the local store are text files that are sent to one log file, located at
/opt/CSCOacs/logs/localStore/, regardless of which logging category they belong to. The local store can
only contain log messages from the local ACS node; the local store ca nnot accept log messages from
other ACS nodes.
You can configure which logs are sent to the local store, but you cannot configure which attributes are
sent with the log messages; all attributes are sent with sent log messages.
Administrative and operational audit log messages are always sent to the local st ore, and you can also
send them to remote syslog server and Monitoring and Reports server targets.
Log messages are sent to the local store with this syslog message format:
time stamp sequence_num msg_code msg_sev msg_class msg_text attr=value
Table19-2 describes the content of the local store syslog message format.
Table19-1 Log Message Severity Levels
ACS Severity
Level Description
Syslog Severity
Level
FATAL Emergency. ACS is not usable and you must take action
immediately.
1 (highest)
ERROR Critical or error conditions. 3
WARN Normal, but significant condition. 4
NOTICE Audit and accounting messages. Messages of severity NOTICE
are always sent to the configured log targets and are not filtered,
regardless of the specified severity threshold.
5
INFO Diagnostic informational message. 6
DEBUG Diagnostic message. 7