EXOS Syslog Severity Overview?

[SchmuFoo]

Hello Community,

just stumpled over the avaible/following syslog severity list and wondering, if there is also an severityname <-> fix number mapping existing?

configure log target syslog 1.2.3.4:514 vr VR-Mgmt local0 filter "DefaultFilter" severity ?
<severity> Severity value to use
"critical" "debug-data" "debug-summary" "debug-verbose" "error" "info" "notice" "warning"


I'm testing the syslog sensor feature from PRTG [1] and the per device configuration sensor is working with the following filter option:

severity[number]

any number (or range) from 0 (emergency) to 7 (debug) specifying the type of message

• severity[4]
• severity[1-3]
• severity[1] AND severity[2]

Durign my tests I found out:

• Failed logins are listed in PRTG as "Severity 4" events and on the EXOS side, the failed login entry is listed as an "warning" event.

• Successfull logins are listed in PRTG as "Severity 6" and on the EXOS side as "info".

But what about all other possible syslog messages and severitys, to which "number level" do they belong to?

Cisco f.e. is using the following mapping:

• Alert Messages, Severity 1
• Critical Messages, Severity 2
• Error Messages, Severity 3
• Warning Messages, Severity 4
• Notification Messages, Severity 5
• Informational Messages, Severity 6
• Debugging Messages, Severity 7

http://www.cisco.com/c/en/us/td/docs/security/asa/syslog-guide/syslogs/logsevp.html

[1] https://prtg.paessler.com/help/syslog_receiver_sensor.htm

Cheers,
Jan

[BrandonC]

I also created a GTAC Knowledge article with further information regarding this:

https://gtacknowledge.extremenetworks.com/articles/Q_A/How-do-EXOS-log-severities-map-to-the-numeric...

[Andrew_Maldonad]

Jan,

Here is a link to a section of the EXOS Command Reference Guide that goes into more detail regarding the severity levels.

http://documentation.extremenetworks.com/exos_commands/EXOS_All/EXOS_Commands_All/r_configure-log-ta...

-Andrew

[Andrew_Maldonad]

Jan,

The EXOS EMS Messages Catalog contains a significant amount of information regarding EXOS log messages including severity level. Here is a link to the EXOS EMS Messages Catalog.

http://documentation.extremenetworks.com/ems_catalog/downloads/EMS_Messages_Catalog.pdf

-Andrew

[Ryan_Yacobucci]

Link is dead. Found new EMS Messages Catalog: http://documentation.extremenetworks.com/ems_catalog_22.1/EMS_Messages_21/introduction.shtml