Cisco Systems VPN 3002 Event Log Format, Get Log, Clear Log, There is no undo, Event Sequence

Chapter 13 Monitoring

Monitoring Filterable Event Log

Get Log	To download the event log from VPN 3002 memory to your PC and view it
	or save it as a text file, click Get Log. The Manager opens a new browser
	window to display the file. The browser address bar shows the VPN 3002
	address and log file default filename; for example,
	http://10.10.4.6/LOG/vpn3002log.txt.
	To save a copy of the log file on your PC, click the File menu on the new
	browser window and select Save As.... The browser opens a dialog box that
	lets you save the file. The default filename is vpn3002log.txt.
	Alternatively, you can use the secondary mouse button to click Get Log on
	this Monitoring Filterable Event Log screen. A pop-up menu presents
	choices whose exact wording depends on your browser, but among them are:
	• Open Link, Open Link in New Window, Open in New Window =
	Open and view the file in a new browser window, as above.
	• Save Target As..., Save Link As... = Save a copy of the log file on your
	PC. Your system will prompt for a filename and location. The default
	filename is vpn3002log.txt.
	When you are finished viewing or saving the file, close the new browser
	window.
Clear Log	To clear the current event log from memory, click this button. The Manager
	then refreshes the screen and shows the empty log.
		Caution The Manager immediately erases the event log
			from memory without asking for confirmation.
			There is no undo.

Event Log Format

Each entry (record) in the event log consists of eight or nine fields:

Sequence Date Time Severity Class/Number Repeat (IPAddress)

String

(The IPAddress field only appears in certain events.)

For example:

3 12/06/2001 14:37:06.680 SEV=4 HTTP/47 RPT=17 10.10.1.35

New administrator login: admin.

Event Sequence	The sequential number of the logged entry. Numbering starts or restarts from
	1 when the system powers up, when you save the event log, or when you
	clear the event log. When the log file wraps after 256 entries, numbering
	continues with event 257 overwriting event 1.
	Although numbering restarts at 1 when the system powers up, it does not
	overwrite existing entries in the event log; it appends them. Assuming the
	log does not wrap, it could contain several sequences of events starting at 1.
	Thus you can examine events preceding and following reboot or reset cycles.
Event Date	The date of the event: MM/DD/YYYY. For example, 12/06/2001 identifies
	an event that occurred on December 6, 2001.
	VPN 3002 Hardware Client Reference
OL-1893-01		13-5