AudioCodes Mediant 600 User Manual page 631

User's Manual
Parameter
Web/EMS: Debug Level
[GwDebugLevel]
Web: Syslog Facility
Number
EMS: SyslogFacility
[SyslogFacility]
Web: Activity Types to
Report via Activity Log
Messages
Version 6.6
connection and at the end of each call.

[4] Start & End & Connect Call = CDR report is sent to Syslog at
the start, at connection, and at the end of each call.
Notes:

The CDR Syslog message complies with RFC 3161 and is
identified by: Facility = 17 (local1) and Severity = 6 (Informational).

This mechanism is active only when Syslog is enabled (i.e., the
parameter EnableSyslog is set to 1).
Defines the Syslog debug logging level.

[0] 0 = (Default) Debug is disabled.

[1] 1 = Flow debugging is enabled.

[5] 5 = Flow, device interface, stack interface, session manager,
and device interface expanded debugging are enabled.

[7] 7 = This option is recommended when the device is running
under "heavy" traffic. In this mode:

The Syslog debug level automatically changes between level 5,
level 1, and level 0, depending on the device's CPU
consumption so that VoIP traffic isn't affected.

Syslog messages are bundled into a single UDP packet, after
which they are sent to a Syslog server (bundling size is
determined by the MaxBundleSyslogLength parameter).
Bundling reduces the number of UDP Syslog packets, thereby
improving CPU utilization.
Note that when this option is used, in order to read Syslog
messages with Wireshark, a special plug-in (i.e., acsyslog.dll) must
be used. Once the plug-in is installed, the Syslog messages are
decoded as "AC SYSLOG" and are dispalyed using the 'acsyslog'
filter instead of the regular 'syslog' filter.
Notes:

This parameter is typically set to 5 if debug traces are required.
However, in cases of heavy traffic, option 7 is recommended.

Options 2, 3, 4, and 6 are not recommended.
Defines the Facility level (0 through 7) of the device's Syslog
messages, according to RFC 3164. This allows you to identify Syslog
messages generated by the device. This is useful, for example, if you
collect the device's and other equipments' Syslog messages, at one
single server. The device's Syslog messages can easily be identified
and distinguished from other Syslog messages by its Facility level.
Therefore, in addition to filtering Syslog messages according to IP
address, the messages can be filtered according to Facility level.

[16] = (Default) local use 0 (local0)

[17] = local use 1 (local1)

[18] = local use 2 (local2)

[19] = local use 3 (local3)

[20] = local use 4 (local4)

[21] = local use 5 (local5)

[22] = local use 6 (local6)

[23] = local use 7 (local7)
Defines the Activity Log mechanism of the device, which sends log
messages to a Syslog server for reporting certain types of Web
631
52. Configuration Parameters Reference
Description
Mediant 600 & Mediant 1000