Structure Of The Syslog Messages - Siemens SIMATIC NET SCALANCE SC-600 Configuration Manual

Appendix A
A.1

Structure of the Syslog messages

The Syslog server collects log information of the devices about specific events. The
Syslog messages are received by the Syslog server via the set UDP port (standard: 514)
and output according to RFC 5424 or RFC 5426. The Syslog protocol prescribes a fixed
sequence and structure of the possible parameters.
Syslog messages are structured as follows according to RFC 5424:
Part / Parameter
HEADER
PRI
VERSION
TIMESTAMP
HOSTNAME
APP-NAME
PROCID
MSGID
STRUCTURED-DATA
timeQuality
sysUpTime
MSG
MESSAGE
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03
Explanation
PRI contains the coded priority of the Syslog message, broken down into Severity (severity of
the message) and Facility (origin of the message).
Version number of the Syslog specification.
The device sends the time stamp in the format "2010-01-01T02:03:15.0003+02:00" as the
local time including the time zone and correction for daylight saving / standard time if
needed.
References the source computer with its name or the IP address.
IPv4 address according to RFC1035: Bytes in decimal representation: XXX.XXX.XXX.XXX
IPv6 address according to RFC4291 Section 2.2
"-" is output if information is missing.
Example in the product:
The station name configured in the "System" tab for the RTU.
Device or application from which the message originates.
"-" is output if information is missing.
The process ID serves to clearly identify the individual processes, for example during analysis
and troubleshooting.
"-" is output if information is missing.
ID to identify the message. "-" is output if information is missing.
The structured data element "timeQuality" provides information on system time. Example:
[timeQuality tzKnown="0" isSynced="0"]
The "tzKnown" parameter indicates whether the sender knows its time zone (value "1" =
known; value "0" = unknown).
The "isSynced" parameter indicates whether the sender is synchronized with a reliable
external time source, e.g. via NTP (value "1" = synchronized; value "0" = not synchronized).
The "sysUpTime" parameter is metainformation about the message.
It specifies the time (in hundredths of seconds) since the last re-initialization of the network
management part of the system.
Message as ASCII string (English)
A
357