Clear Log; Event Log Format; Event Sequence; Event Date - Cisco VPN 3000 User Manual

Clear Log

To clear the current event log from memory, click this button. The Manager then refreshes the screen and
shows the empty log.
Caution:
The Manager immediately erases the event log from memory without asking for confirmation. There is
no undo.

Event log format

Each entry (record) in the event log consists of eight or nine fields:
(The IPAddress field appears in only certain events.)
For example:

Event sequence

The sequential number of the logged entry. Numbering starts or restarts from 1 when the system powers
up, when you save the event log, or when you clear the event log. When the log file wraps after 2048
entries (Model 3015–3080; 256 entries on Model 3005), numbering continues with event 2049 (or 257)
overwriting event 1. The maximum sequence number is 65536.
Although numbering restarts at 1 when the system powers up, it does not overwrite existing entries in
the event log; it appends them. Assuming the log doesn't wrap, it could contain several sequences of
events starting at 1. Thus you can examine events preceding and following reboot or reset cycles.

Event date

The date of the event: MM/DD/YYYY . For example, 12/06/1999 identifies an event that occurred on
December 6, 1999.

Event time

The time of the event: hour:minute:second.millisecond . The hour is based on a 24-hour clock.
For example, 14:37:06.680 identifies an event that occurred at 2:37:06.680 PM.

Event severity

The severity level of the event; for example: SEV=4 identifies an event of severity level 4. See Table
10-2 under Configuration | System | Events for an explanation of severity levels.
VPN 3000 Concentrator Series User Guide
Sequence Date Time Severity Class/Number Repeat (IPAddress)
String
3 12/06/1999 14:37:06.680 SEV=4 HTTP/47 RPT=17 10.10.1.35
New administrator login: admin.
Monitor | Event Log
15-7