3.2.35. logging

Global Settings

Note

requires a Product License.

Global logging configuration.

vsr running config# system logging

disk-usage (state only)

Total disk usage of all journal files.

vsr> show state system logging disk-usage

rate-limit

Configure logging rate limiting.

vsr running config# system logging rate-limit

interval

Amount of time that is being measured for rate limiting. A value of 0 disables rate limiting.

vsr running config# system logging rate-limit
vsr running rate-limit# interval <uint32>
Default value
30

burst

Amount of messages that have to occur in the rate limit interval to trigger rate limiting. A value of 0 disables rate limiting.

vsr running config# system logging rate-limit
vsr running rate-limit# burst <uint32>
Default value
1000

Per-VRF Settings

Note

requires a Product License.

Per-VRF logging configuration.

vsr running config# vrf <vrf> logging

syslog

Syslog configuration.

vsr running config# vrf <vrf> logging syslog

enabled (pushed)

Enable syslog.

vsr running config# vrf <vrf> logging syslog
vsr running syslog# enabled true|false
Default value
true

tag

Tag that will be included in the logs sent to the server.

vsr running config# vrf <vrf> logging syslog
vsr running syslog# tag <string>

remote-server

Remote log server list.

vsr running config# vrf <vrf> logging syslog remote-server <remote-server>

<remote-server>

The host type represents either an unzoned IP address or a DNS domain name.

protocol

Transmission protocol.

vsr running config# vrf <vrf> logging syslog remote-server <remote-server>
vsr running remote-server <remote-server># protocol PROTOCOL

PROTOCOL values

Description

udp

Traditional UDP transport. Extremely lossy but standard.

tcp

Plain TCP based transport. Loses messages only during certain situations but is widely available.

Default value
tcp
port

Sets the destination port number for syslog UDP messages to the server.

vsr running config# vrf <vrf> logging syslog remote-server <remote-server>
vsr running remote-server <remote-server># port PORT

PORT

A 16-bit port number used by a transport protocol such as TCP or UDP.

Default value
514
log-filter

Filter messages sent to the server.

vsr running config# vrf <vrf> logging syslog remote-server <remote-server>
vsr running remote-server <remote-server># log-filter facility <log-filter> \
...   level EQUAL greater-or-equal GREATER-OR-EQUAL \
...     not LEVEL

<log-filter>

Logging facilities.

level

Select messages level to send to the server.

level EQUAL greater-or-equal GREATER-OR-EQUAL \
     not LEVEL
EQUAL

Select levels to send the server.

EQUAL

EQUAL values

Description

<log-level>

Logging level message levels.

any

Send all messages from this facility.

none

Send nothing from this facility.

greater-or-equal

Send messages with a greater or equal level than the selected one to the server.

greater-or-equal GREATER-OR-EQUAL

GREATER-OR-EQUAL

Logging level message levels.

not

Select levels to not send to the server.

not LEVEL
LEVEL

Do not send messages with this level.

LEVEL

LEVEL

Logging level message levels.

tls

Enable syslog messages encryption and server/client authentication.

vsr running config# vrf <vrf> logging syslog tls
enabled

Enable/disable syslog messages encryption and server/client authentication.

vsr running config# vrf <vrf> logging syslog tls
vsr running tls# enabled true|false
Default value
true
ca-certificate (mandatory)

PEM-encoded X509 certificate authority certificate.

vsr running config# vrf <vrf> logging syslog tls
vsr running tls# ca-certificate <string>
certificate

PEM-encoded X509 certificate.

vsr running config# vrf <vrf> logging syslog tls
vsr running tls# certificate <string>
private-key

PEM-encoded X509 private key.

vsr running config# vrf <vrf> logging syslog tls
vsr running tls# private-key <string>
server-authentication

Server authentication mode selection.

vsr running config# vrf <vrf> logging syslog tls
vsr running tls# server-authentication anonymous certificate \
...   name <string> \
...   fingerprint <string>
anonymous

No authentication.

anonymous
certificate

Certificate validation only.

certificate
name

Certificate validation and subject name authentication.

name <string>
<string>

Certificate validation and subject name authentication.

<string>
fingerprint

Certificate fingerprint authentication.

fingerprint <string>
<string>

Certificate fingerprint authentication.

<string>