Add, Modify and Delete Syslog Server on SFE/SGE Managed Switches

Objective

Syslog is a standardized protocol that keeps record of network activities. The syslog server allows separation of the software that generates messages from the system that store and analyze them. The objective of this document is to add, modify and delete syslog server information on SFE/SGE Managed Switches.

Applicable Devices

• SFE/SGE Managed Switches

Syslog Server Information

Add Syslog Server

Step 1. Log in to the web configuration utility and choose Admin > Logs > Remote Log Servers. The Remote Log Server page opens:

 

Step 2. Click Add. The Add Syslog Server window appears.

Step 3. Click the desired Supported IP Format radio button.

• IPv4 — The IP address is of IPv4 address type.

• IPv6 — The IP address is of IPv6 address type.

Note: If the administrator chooses IPv4, skip to Step 6.

Step 4. (Optional) If the IP version is chosen as IPv6, click the supported IPv6 address type radio button in the IPv6 Address Type field.

• Link Local — This address type uniquely identifies hosts on a single network link. This address can be used for communication only on the local network.

• Global — This address type is a global unicast IPv6 type that is visible and reachable from other networks.

Step 5. (Optional) If the IPv6 address type is Link Local, choose the interface through which the address is received from the Link Local Interface drop-down list. The drop-down list contains None and ISATAP.

Step 6. Enter the server IP address to which logs can be sent in the Log Server IP Address field.

Step 7. Enter the value for the User Datagram Protocol (UDP) port to which the server logs are sent. The possible range is 1 to 65535. The default value is 514.

Step 8. Choose a facility from the Facility drop-down list. It is a user-defined application from which system logs are sent to the syslog server. Only one facility can be assigned to a single server. If a second facility level is assigned then the first one will be overridden. All applications defined for a device utilize the same facility on a server. The possible field values are Local0 to Local7. The default field value is Local7.

Step 9. Enter a user-defined server description in the Description field.

Step 10. Choose a minimum severity from the Minimum Severity drop-down list.

• Emergency — The highest log level. If a device is down or not working properly, an emergency log message is logged to a specified logging location.

• Alert — The second log level. An alert log is logged when there is a serious device malfunction, such as all device features are down.

• Critical — The third highest log level. A critical log is logged when there is a critical device malfunction; such as, two ports are not functioning while remaining work fine.

• Error — The fourth log level. A device error log is logged when there is error in the device, such as single port is offline.

• Warning — The fifth log level. A warning message is logged when the device is functioning properly, but an operational problem has occurred.

• Notice — The sixth log level. A notice log is logged when the device is functioning properly, but system notice has occurred.

• Informational — The last but one log level. This log provides device information.

• Debug — The last log level but memory intensive level. This log provides all debugging messages.

Step 11. Click Apply to save the settings. The syslog server is successfully added and the device is updated.

Modify Syslog Server

Step 1. Log in to the web configuration utility and choose Admin > Logs > Remote Log Servers. The Remote Log Server page opens:

 

Step 2. Click Edit. The Edit Syslog Server window appears.

Step 3. Specify the server IP address to which logs can be sent in the Server field.

Step 4. Enter the value for the User Datagram Protocol (UDP) port to which the server logs are sent. The possible range is 1 to 65535. The default value is 514.

Step 5. Choose a facility from the Facility drop-down list. It is a user-defined application from which system logs are sent to the syslog server. Only one facility can be assigned to a single server. If a second facility level is assigned then the first one will be overridden. All applications defined for a device utilize the same facility on a server. The possible field values are Local0 to Local7. The default field value is Local7.

Step 6. Enter a user-defined server description in the Description field.

Step 7. Choose a severity level from the Severity To Include drop-down list.

• Emergency — The highest log level. If a device is down or not working properly, an emergency log message is logged to a specified logging location.

• Alert — The second log level. An alert log is logged when there is a serious device malfunction, such as all device features are down.

• Critical — The third highest log level. A critical log is logged when there is a critical device malfunction; such as, two ports are not functioning while the remaining work fine.

• Error — The fourth log level. A device error log is logged when there is error in the device, such as a single port is offline.

• Warning — The fifth log level. A warning message is logged when the device is functioning properly, but an operational problem has occurred.

• Notice — The sixth log level. A notice log is logged when the device is functioning properly, but system notice has occurred.

• Informational — The last but one log level. This log provides device information.

• Debug — The last log level but memory intensive level. This log provides all debugging messages.

Step 8. Click Apply to save the settings. The syslog server is successfully added and the device is updated.

Delete Syslog Server

Step 1. Log in to the web configuration utility and choose Admin > Logs > Remote Log Servers. The Remote Log Server page opens:

 

Step 2. Check the syslog setting check box that the administrator wants to remove.

Step 3. Click Delete to delete the Syslog Server.