The priority in a SYSLOG message contains information about the the message severity and the facility (service or component that triggered the message).
The eight severity levels originally defined in SYSLOG have been reduced to five levels in the LANCOM. The table below shows the correlation between the LANCOM alarm level, the meaning and the SYSLOG severities.
Priority | Meaning | SYSLOG severity |
---|---|---|
Alarm | This category includes all messages requiring the system administrator's close attention. | PANIC, ALERT, CRIT |
Error | All error messages which can occur under normal conditions are communicated at this level; no special attention is required by the administrator (e.g. connection errors). | ERROR |
Warning | This level communicates messages which do not compromise normal operating conditions. | WARNING |
Information | At this level, all messages are sent that have a purely informational character (e.g. accounting information). | NOTICE, INFORM |
Debug | Communication of all debug messages. Debug messages generate large data volumes and can compromise the device's operation. For this reason they should be disabled for normal operations and only used for troubleshooting. | DEBUG |
The table below provides an overview of the meaning of all internal message sources that you can set in the LANCOM. The final column in the table also provides the standard correlation between the internal sources of the LANCOM and the SYSLOG facilities. This mapping can be changed, if necessary.
Source | Meaning | Facility |
---|---|---|
System | System messages (boot events, timer system, etc.) | KERNEL |
Logins | Messages concerning the user's login or logout during the PPP negotiation, and any errors that occur during this. | AUTH |
System time | Messages about changes to the system time | CRON |
Console logins | Messages about console logins (Telnet, Outband, etc.), logouts and any errors that occurred during this. | AUTHPRIV |
Connections | Messages about establishment and termination of connections and any errors that occurred (display trace) | LOCAL0 |
Accounting | Accounting information stored after termination of a connection (user, online time, transfer volumes) | LOCAL1 |
Administration | Messages on changes to the configuration, remotely executed commands, etc. | LOCAL2 |
Router | Regular statistics about the most frequently used services (breakdown per port number) and messages about filtered packets, routing errors, etc. | LOCAL3 |