This document discusses the System Event Archieve (SEA) feature in general, that is available in Catalyst 6500/6800 platforms, steps to locate the SEA archives rand also steps to convert them to text format for further analysis.
System Events Archive (SEA) is one of the device management feartures avalable in Cat 6500/6800 platforms. SEA enables the CPUs in the switch builds archives of the events, and thess archives are stored in a local non-volatile file system.
SEA maintains two files - sea_log.dat and sea_console.dat.
sea_log.dat = archive of the events reported by each application in the IOS (e.g., GOLD)
sea_console.dat = archive of the console messages
SEA feature allocates 32MB of memory for each of these files (so, total of 64 MB) in a local filesystem - e.g., bootdisk:
Remember, this 32 MB is a circular buffer and will overwrite the oldest messages.
The configuration guides (given in the "Relavant Documents" section below) provide commands to check if the feature is enabled, the file system selected for the archive, how to clear archive files etc.
show logging system
show logging system disk
show logging system size
clear logging system
Locating SEA Logs
Do "dir all" command to locate the sea_console.dat and sea_log.dat files.
From a Catalyst 6800 VSS setup:
6800-A# show switch virtual
Switch mode : Virtual Switch Virtual switch domain number : 10 Local switch number : 1 Local switch operational role: Virtual Switch Active Peer switch number : 2 Peer switch operational role : Virtual Switch Standby
6800-A# dir all
Directory of bootdisk:/ <<== From Sw1 1 -rw- 33554432 Mar 8 2014 03:11:52 +00:00 sea_console.dat 3 -rw- 33554432 Mar 8 2014 03:12:30 +00:00 sea_log.dat
Directory of slavebootdisk:/ <<=== From Sw2 1 -rw- 33554432 Mar 10 2014 05:12:12 +00:00 sea_log.dat 3 -rw- 33554432 Mar 10 2014 05:12:50 +00:00 sea_console.dat
From a Catalyst 6500 VSS setup:
VS6500# show switch virt Switch mode : Virtual Switch Virtual switch domain number : 1 Local switch number : 1 Local switch operational role: Virtual Switch Active Peer switch number : 2 Peer switch operational role : Virtual Switch Standby
VS6500# dir all
Directory of sup-bootdisk:/ <<== From Sw1 1 -rw- 33554432 Aug 29 2014 14:06:42 -04:00 sea_console.dat 3 -rw- 33554432 Nov 8 2012 16:59:38 -05:00 sea_log.dat
Directory of slavesup-bootdisk:/ <<== From Sw1 1 -rw- 33554432 Sep 8 2014 08:34:02 -04:00 sea_log.dat 2 -rw- 33554432 Mar 19 2015 12:36:16 -04:00 sea_console.dat
Retrieving SEA Logs
It is strongly recommended to add followings to the file name:
Switch # (in case of VSS)
Module # (in case mod 5 and mod 6 are present in the same chassis)
File content (sea console or log)
Following are the steps to convert the .dat files to text files.
(1) Convert the logs to text
USe following commands to conver the archives to text. Please note that "show logging system console" is used to convert the sea_console.dat file and "show logging system disk" is used to convert sea_log.dat file.
From a Catalyst 6800 VSS setup (example given above):
6800A# show logging system console file bootdisk:sea_console.dat | redirect bootdisk:6800A-Sw1-SEA-Console-Jul082015.txt
6800A# show logging system disk bootdisk:sea_log.dat | redirect bootdisk:6800A-Sw1-SEA-Log-Jul082015.txt
6800A# show logging system console file slavebootdisk:sea_console.dat | redirect slavebootdisk:6800A-Sw2-SEA-Console-Jul082015.txt
6800A# show logging system disk slavebootdisk:sea_log.dat | redirect slavebootdisk:6800A-Sw2-SEA-Log-Jul082015.txt
(2) Make sure the text files are created and are in the file system:
Make sure the file sizes are non-zero, It is NOT necessary for the text files to be 32MB.
32MB is just an "allocated" space for the .dat files not necessarily used.
Moreover, the files are in different formats - dat vs. txt.