Filtering Events Sent To Targets - Extreme Networks ExtremeWare XOS Guide Manual

Event Management System/Logging
and targets are disabled on the backup MSM, as they are handled on the primary. If the
syslog
condition for the target is met by a message generated on the backup, the event is sent to
primary-msm
the primary MSM.
Note that the target is active only on the primary MSM, and the target is
backup-msm primary-msm
active only on the backup MSM.

Filtering Events Sent to Targets

Not all event messages are sent to every enabled target. Each target receives only the messages that it is
configured for.
Target Configuration
To specify the messages to send to an enabled target, you will set a message severity level, a filter name,
and a match expression. These items determine which messages are sent to the target. You can also
configure the format of the messages in the targets. For example, the console display target is
configured to get messages of severity info and greater, the NVRAM target gets messages of severity
and greater, and the memory buffer target gets messages of severity and greater.
warning debug-data
All the targets are associated by default with a filter named DefaultFilter, that passes all events at or
above the default severity threshold. All the targets are also associated with a default match expression
that matches any messages (the expression that matches any message is displayed as
Match : (none)
from the command line). And finally, each target has a format associated with it.
To display the current log configuration of the targets, use the following command:
show log configuration target {console | memory-buffer | nvram | primary-msm | backup-
msm | session | syslog {<ipaddress> | <ipPort> | vr <vr_name>} [local0 ... local7]}
To configure a target, you use specific commands for severity, filters, and formats. In addition, you can
configure the source IP address for a syslog target. Configuring the source IP address allows the
management station or syslog server to identify from which switch it received the log messages. To
configure the source IP address for a syslog target, use the following command:
configure log target syslog [all | <ipaddress> | <ipPort>] {vr <vr_name>} {local0 ...
local7} from <source-ip-address>
The following sections describe the commands required for configuring filters, formats, and severity.
Severity
Messages are issued with one of the severity levels specified by the standard Berkeley Software
Distribution (BSD) syslog values (RFC 3164)— , , , , and —plus three
critical error warning notice info
severity levels for extended debugging— , , and . Note that
debug-summary debug-verbose debug-data
RFC 3164 syslog values and are not needed because is the most severe
emergency alert critical
event in the system.
199
ExtremeWare XOS 11.3 Concepts Guide