Syslog Messages; Structure Of The Messages - Siemens SIMATIC CloudConnect CC7 Series Operating Instructions Manual

Syslog messages

Security events
The gateway outputs Syslog messages according to RFC 5424. The messages are based
on IEC 62443-3-3.
C.1

Structure of the messages

C.1.1 Structure of the Syslog messages
Syslog messages record changes in device states as status information. Syslog messages
according to RFC 5424 or RFC 5426 are output by devices and transferred to a server via
the set UDP port (standard: 514). The Syslog server collects the information of the devices
and informs you about these events.
The Syslog protocol prescribes a fixed sequence and structure of the possible parameters.
Syslog messages according to RFC5424 have the following structure:
Part / Parameter
HEADER
PRI
VERSION
TIMESTAMP
SIMATIC CC7
Operating Instructions, 10/2019, C79000-G8976-C503-02
Explanation
Priority of the Syslog message, divided into:
Severity (Severity)
•
Possible values:
– 0 Emergency
– 1 Alert
– 2 Critical
– 3 Error
– 4 Warning
– 5 Notice
– 6 Information
– 7 Debug
Facility (Origin)
•
Possible values, e.g.: Sub-system, service, user
Version number of the Syslog specification
Time stamp of the device as local time including time zone and correction for daylight sav-
ing/standard time
Format: YYYY-MM-DDThh:mm:ss.msmsmsms+xx:yy
Example: 2010-01-01T02:03:15.0003+02:00
C
141