Syslog messages
B.2 Variables in Syslog messages
Note
Additional information
You can find additional information on the structure of Syslog messages and the meaning of the
parameters in the RFCs:
https://tools.ietf.org/html/rfc5424
https://tools.ietf.org/html/rfc5426
B.2
Variables in Syslog messages
The variables are displayed in the "Syslog messages" section in the "Message text" field with curly
brackets {variable}.
The output messages can contain the following variables:
Table B-2
Possible variables in Syslog messages
Variable
Description
{Ip address}
IPv4 address to RFC1035
{Protocol}
Protocol used or service that has generated the event. %s
{User name}
Character string (without spaces) that identifies the au‐
thenticated user based on the name.
{Action user
Identifies the user based on his/her name This is not the
name} or
authenticated user.
{Destination
user name}
{Role}
Symbolic name for the group role.
{Time sec‐
Number of seconds
ond}
{Max ses‐
Maximum number of sessions
sions}
{Url}
URL of the Web server that was accessed.
{Config de‐
Character string (with spaces) for the configuration.
tail}
94
Format
Possible values or exam‐
ple
%d.%d.%d.%d
192.168.1.105
XXX.XXX.XXX.XXX
TCP | WBM | PNIO | PB | OPC |
EIP
%s
<name>
%s
<First name>.<Name>
%s
Administrator | User | OPC
UA
%d
44
%d
10
%s
/Engineering/Reset2Facto‐
ry?
r=0.6856445562508033
%s
Power
Operating Instructions, 08/2023, C79000-G8976-C698-02
SIMATIC RF1100