Filter
Top Products
Remote Logging Output
Figure 9 on page 160 shows a sample from the /tmp/syslog_news_info file. Notice
that the first message has a sequence number of 310. This means that the first 309
ELS messages were not sent from the source 2210. There are several reasons for
this:
v The remote-logging facility had not completed initialization when the messages
were first passed to ELS
ELS config>display sub snmp all
ELS config>remote sub snmp all log_news log_info
ELS config>display event srt.017
ELS config>remote event srt.017 log_news log_info
ELS config>display event stp.016
ELS config>remote event stp.016 log_user log_info
ELS config>display event stp.026
ELS config>remote event stp.026 log_news log_info
ELS config>display event stp.024
ELS config>remote event stp.024 log_news log_info
ELS config>display event ip.068
ELS config>remote event ip.068 log_news log_info
ELS config>display event ip.058
ELS config>remote event ip.058 log_news log_info
ELS config>display event ip.022
ELS config>remote event ip.022 log_news log_info
ELS config>display event gw.022
ELS config>remote event gw.22 log_news log_info
ELS config>display event arp.011
ELS config>remote event arp.011 log_user log_alert
ELS config>display event arp.002
ELS config>remote event arp.022 log_user log_alert
ELS config>list status
Subsystem: SNMP
Disp levels: ERROR INFO TRACE
Trap levels: none
Trace levels: none
Remote levels: ERROR INFO TRACE
Syslog Facility/Level: LOG_NEWS LOG_INFO
Event Display Trap Trace Remote
SRT.017 On Unset Unset On
Syslog Facility/Level: LOG_NEWS LOG_INFO
STP.016 On Unset Unset On
Syslog Facility/Level: LOG_NEWS LOG_INFO
STP.026 On Unset Unset On
Syslog Facility/Level: LOG_NEWS LOG_INFO
STP.024 On Unset Unset On
Syslog Facility/Level: LOG_NEWS LOG_INFO
IP.068 On Unset Unset
Syslog Facility/Level: LOG_NEWS LOG_INFO
IP.058 On Unset Unset On
Syslog Facility/Level: LOG_NEWS LOG_INFO
IP.022 On Unset Unset On
Syslog Facility/Level: LOG_NEWS LOG_INFO
GW.022 On Unset Unset On
Syslog Facility/Level: LOG_NEWS LOG_INFO
ARP.011 On Unset Unset On
Syslog Facility/Level: LOG_USER LOG_ALERT
ARP.002 On Unset Unset On
Syslog Facility/Level: LOG_USER LOG_ALERT
Figure 8. Configuring Subsystems and Events for Remote Logging
Using ELS
Chapter 12. Using the Event Logging System (ELS) 159