Syslog - Cisco Nexus 1000V Troubleshooting Manual

Chapter 2 Troubleshooting Tools
•
Authentication refers to the authentication of users for access to a specific device. You can use RADIUS
to manage user accounts for access to a Cisco Nexus 1000V. When you try to log into a device, the Cisco
Nexus 1000V validates you with information from a central RADIUS server.
Authorization refers to the scope of access that you have once you have been authenticated. Assigned
roles for users can be stored in a RADIUS server with a list of actual devices that the user should have
access to. Once the user has been authenticated, the switch can then refer to the RADIUS server to
determine the extent of access the user will have within the switch network.
Accounting refers to the log information that is kept for each management session in a switch. This
information can be used to generate reports for troubleshooting purposes and user accountability.
Accounting can be implemented locally or remotely (using RADIUS).
The following is an example of an accounting log entries:
switch# show accounting log
Sun Dec 15 04:02:27 2002:start:/dev/pts/0_1039924947:admin
Sun Dec 15 04:02:28 2002:stop:/dev/pts/0_1039924947:admin:vsh exited normally
Sun Dec 15 04:02:33 2002:start:/dev/pts/0_1039924953:admin
Sun Dec 15 04:02:34 2002:stop:/dev/pts/0_1039924953:admin:vsh exited normally
Sun Dec 15 05:02:08 2002:start:snmp_1039928528_172.22.95.167:public
Sun Dec 15 05:02:08 2002:update:snmp_1039928528_172.22.95.167:public:Switchname
The accounting log shows only the beginning and ending (start and stop) for each session.
Note

Syslog

The system message logging software saves messages in a log file or directs the messages to other
devices. This feature provides the following capabilities:
•
•
•
Syslog allows you to store a chronological log of system messages locally or sent to a central syslog
server. Syslog messages can also be sent to the console for immediate use. These messages can vary in
detail depending on the configuration that you choose.
Syslog messages are categorized into seven severity levels from debug to critical events. You can limit
the severity levels that are reported for specific services within the switch.
Log messages are not saved across system reboots. However, a maximum of 100 log messages with a
severity level of critical and below (levels 0, 1, and 2) can logged to a local file or server.
Logging Levels
The Cisco Nexus 1000V supports the following logging levels:
•
•
•
•
OL-31593-01
Accounting
Logging information for monitoring and troubleshooting.
Selection of the types of logging information to be captured.
Selection of the destination of the captured logging information.
0—emergency
1—alert
2—critical
3—error
Cisco Nexus 1000V Troubleshooting Guide, Release 5.2(1)SV3(1.1)
Syslog
2-5