Cisco Systems VPN 3002 manual Syslog Format, String

Chapter 9 Events

Configuration System Events General

Syslog Format

Click the Syslog Format drop-down menu button and choose the format for all events sent to UNIX syslog servers. Choices are:

•Original = Original VPN 3002 event format with information on one line. Each entry in the event log consists of the following fields:

Sequence Date Time SEV=Severity Class/Number RPT=RepeatCount String

–Sequence: The sequence number of the event.

–Date: The date the event occurred. The date is in the following format: MM/DD/YYYY.

–Time: The time the event occurred. The time is in the following format: hh:mm:ss.ttt.

–Severity: The severity of the event (1-13). To see how this original severity level maps to Cisco IOS severity levels, see Table 9-2.

–Class/Number: The event class and event number. For a list of event classes, see the “Events” chapter.

–RepeatCount: The number of times this particular event has occurred since the VPN 3002 was last booted.

–String: The description of the event. The string sometimes includes the IP address of the user whose session generated the event.

For example:

3 12/06/1999 14:37:06.680 SEV=4 HTTP/47 RPT=17 10.10.1.35 New administrator login:

admin.

•Cisco IOS Compatible = Event format that is compatible with Cisco syslog management applications. Each entry in the event log is one line consisting of the following fields:

Sequence: Date Time TimeZone TimeZoneOffset %Class-Severity-Number: RPT=RepeatCount:

String

–Sequence: The sequence number of the event.

–Date: The date the event occurred. The date is in the following format: YYYY MMM DD.

–Time: The time the event occurred. The time is in the following format: hh:mm:ss.ttt.

–TimeZone: The time zone in which the event occurred.

–TimeZoneOffset: The offset of the time zone from GMT.

–Class: The event class. For a list of event classes, see the “Events” chapter.

–Severity: The Cisco IOS severity of the event (0-7). Table 9-3shows the mapping between Cisco IOS format severity levels and Original format severity levels.

–Number: The event number.

–RepeatCount: The number of times this particular event has occurred since the VPN Concentrator was last booted.

–String: The description of the event. The string sometimes includes the IP address of the user whose session generated the event.

For example:

31999 Dec 06 14:37:06.680 EDT -4:00 %HTTP-5-47:RPT=17 10.10.1.35: New administrator login: admin.

VPN 3002 Hardware Client Reference

9-6 OL-1893-01