3Com 4500 Configuration Manual page 646

If the address of the log host is specified in the information center of the switch, when logs are
generated, the switch sends the logs to the log host in the above format. For detailed information,
refer to Setting to Output System Information to a Log
There is the syslog process on the Unix or Linux platform, you can start the process to receive the
logs sent from the switch; in the Windows platform, you need to install the specific software, and it
will operate as the syslog host.
Some log host software will resolve the received information as well as its format, so that the log
format displayed on the log host is different from the one described in this manual.
What follows is a detailed explanation of the information fields involved:
Int_16 (Priority)
The priority is calculated using the following formula: facility*8+severity-1, in which
facility (the device name) defaults to local7 with the value being 23 (the value of local6 is 22, that of
local5 is 21, and so on).
severity (the information level) ranges from 1 to 8.
associated with each severity.
Note that the priority field appears only when the information has been sent to the log host.
Timestamp
The time stamp sent to the log host is in the format of Mmm dd hh:mm:ss:ms yyyy, where:
"Mmm" represents the month, and the available values are: Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep,
Oct, Nov, and Dec.
"dd" is the date, which shall follow a space if less than 10, for example, " 7".
"hh:mm:ss:ms" is the local time, where "hh" is in the 24-hour format, ranging from 00 to 23, both "mm"
and "ss" range from 00 to 59, "ms" ranges from 000 to 999.
"yyyy" is the year.
Note that a space separates the time stamp and the host name.
Sysname
Sysname is the system name of the local switch and defaults to "3Com".
You can use the sysname command to modify the system name. Refer to the System Maintenance and
Debugging part of this manual for details)
Note that there is a space between the sysname and module fields.
%%
This field is a preamble used to identify a vendor. It is displayed only when the output destination is log
host.
nn
This field is a version identifier of syslog. It is displayed only when the output destination is log host.
Host.
Table 1-1
1-5
details the value and meaning