Alcatel-Lucent 7210 SAS E OS System Management Manual page 274

Logging Destination Commands
Default No source stream is configured.
Parameters
main — Instructs all events in the main event stream to be sent to the destination defined in the to
security — Instructs all events in the security event stream to be sent to the destination defined in the
change — Instructs all events in the user activity stream to be sent to the destination configured in the
debug-trace — Instructs all debug-trace messages in the debug stream to be sent to the destination
log-id
Syntax [no] log-id log-id
Context config>log
Description This command creates a context to configure destinations for event streams.
The log-id context is used to direct events, alarms/traps, and debug information to respective
destinations.
A maximum of 10 logs can be configured.
Before an event can be associated with this log-id, the from command identifying the source of the
event must be configured.
Only one destination can be specified for a log-id. The destination of an event stream can be an in-
memory buffer, console, session, snmp-trap-group, syslog, or file.
Use the event-control command to suppress the generation of events, alarms, and traps for all log
destinations.
An event filter policy can be applied in the log-id context to limit which events, alarms, and traps are
sent to the specified log-id.
Log-IDs 99 and 100 are created by the agent. Log-ID 99 captures all log messages.
Log-ID 100 captures log messages with a severity level of major and above.
Note that Log-ID 99 provides valuable information for the admin-tech file. Removing or changing
the log configuration may hinder debugging capabilities. It is strongly recommended not to alter the
configuration for Log-ID 99.
Page 274
command for this destination log-id. The main event stream contains the events that are not
explicitly directed to any other event stream. To limit the events forwarded to the destination,
configure filters using the filter command.
to command for this destination log-id. The security stream contains all events that affect
attempts to breach system security such as failed login attempts, attempts to access MIB tables to
which the user is not granted access or attempts to enter a branch of the CLI to which access has
not been granted. To limit the events forwarded to the destination, configure filters using the fil-
ter command.
to command for this destination log-id. The change event stream contains all events that directly
affect the configuration or operation of this node. To limit the events forwarded to the change
stream destination, configure filters using the filter command.
configured in the to command for this destination log-id. Filters applied to debug messages are
limited to application and subject.
7210 SAS-E OS System Management Guide