Appendix A Using Syslog; Overview - HP 9304m Installation And Getting Started Manual

This appendix describes how to display Syslog messages and how to configure the Syslog facility, and lists the
Syslog messages that an HP Routing Switch can display during standard operation.

Overview

An HP device's software can write syslog messages to provide information at the following severity levels:
• Emergencies
• Alerts
• Critical
• Errors
• Warnings
• Notifications
• Informational
• Debugging
The device writes the messages to a local buffer that can hold up to 100 messages. You also can specify the IP
address or host name of up to six SyslogD servers. When you specify a SyslogD server, the HP device writes the
messages both to the system log and to the SyslogD server.
Using a SyslogD server ensures that the messages remain available even after a system reload. The HP device's
local Syslog buffer is cleared during a system reload or reboot, but the Syslog messages sent to the SyslogD
server remain on the server.
The SyslogD service on a Syslog server receives logging messages from applications on the local host or from
devices such as a Routing Switch. SyslogD adds a time stamp to each received message and directs messages
to a log file. Most Unix workstations come with SyslogD configured. Some third party vendor products also
provide SyslogD running on NT.
SyslogD uses UDP port 514 and each SyslogD message thus is sent with destination port 514. Each SyslogD
message is one line with SyslogD message format. The message is embedded in the text portion of the SyslogD
format. There are several subfields in the format. Keywords are used to identify each subfield, and commas are
delimiters. The subfield order is insensitive except that the text subfield should be the last field in the message.
All the subfields are optional.
Appendix A
Using Syslog
A - 1