Kings,
The levels are cumulative. So at level 0 you ONLY get the emergency syslog messages. At level 2 you get the emergency (lvl 0), alert (lvl 1) and critical (lvl 2) messages. So the higher the setting in the logging command the more messages your device will generate. The increase is not linear, i.e. there are more alert messages than emergency messages. If for some reason you wanted to ONLY get the alerts then you would have to enable level 1 and then additionally disable each of the emergency messages individually. If you wanted to enable all critical (level 2) and below plus a few messages from levels 3 - 7 then your best bet is to enable logging at level two and configure the individual higher level messages at level 2. Hope that helps, Terry Little (425) 894-4109 (m) (425) 468-1057 (o) From: [email protected] [mailto:[email protected]] On Behalf Of Kingsley Charles Sent: Wednesday, April 21, 2010 8:43 AM To: [email protected] Subject: [OSL | CCIE_Security] Syslog levels Hi all With the syslog levels, which one is highest 7 or 1? If you enable "logging console 7", all the levels are inculded in the log in IOS or ASA. Most of the docs, says 7 is highest level. Some docs, says the numerically less number is the highest level. Well, if you check following table in the 0, 1, 2 ..... order, 0 is the most critical as it is emergency and 7 is the least as it just debugging. So it should have been like this where "logging console 0" should have enabled all levels. But the reverse has been implemented. Any thoughts? Level Name Level Number Description Syslog Definition emergencies 0 System unusable LOG_EMERG alerts 1 Immediate action needed LOG_ALERT critical 2 Critical conditions LOG_CRIT errors 3 Error conditions LOG_ERR warnings 4 Warning conditions LOG_WARNING notifications 5 Normal but significant condition LOG_NOTICE informational 6 Informational messages only LOG_INFO debugging 7 Debugging messages LOG_DEBUG With regards Kings
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
