syslog

This command specifies where to forward log messages.

Syntax

syslog address level

Availability

When RBM enforcement applies to the CLI, as defined by the RBM apply-cli command, this command is available to only the admin account. When RBM enforcement does not apply to the CLI, this command is available to the following users.
  • The admin account
  • Privileged users
  • Local users with the appropriate command group added to their user group

Parameters

address
Specifies the IP address of the target server.
level
Specifies the base criticality of messages to forward to the target server.
  • For only emergency events, enter emerg.
  • For alert events and greater, enter alert.
  • For critical events and greater, enter critic.
  • For error events and greater, enter error.
  • For warning events and greater, enter warn.
  • For notice events and greater, enter notice.
  • For information events and greater, enter info.
  • For debug events and greater, enter debug.

Guidelines

Use the loglevel, logsize, and syslog commands to configure the system log. However, use the logging target command to enter Log Target mode. In this mode, you can exercise more precise control over log formats and contents.

Log events are characterized in descending order of importance.

Log levels can be expressed as character strings or as integer values, with 0 equating to the most important and 6 equating to the least important.

The log level specifies that all events of greater or equal importance to the argument are logged.

The loglevel command specifies the event types to log locally. The syslog command specifies a subset of locally logged events to forward to a remote system.

Reception of log events by the remote system requires the installation of a syslog daemon.

Note: Events that are forwarded to the syslog facility are filtered through the local event log. Events that are forwarded must be the same as the events that are locally logged or a subset of those events. For example, you can use the loglevel command to specify a local log level of 3. This level means that emergency, alert, critical, and error events are written to the local log facility. With this log level, you can specify a syslog level of 0, 1, 2, or 3. You cannot specify a syslog level of 4, 5, or 6.

Examples

  • Identify IP address 10.10.100.17 as the recipient of emergency events only.
    # syslog 10.10.100.17 0
  • Identify IP address 10.10.100.17 as the recipient of emergency events only.
    # syslog 10.10.100.17 emerg
  • Identify IP address 10.10.100.17 as the recipient of error, critical, alert, and emergency events.
    # syslog 10.10.100.17 3