In this section:

 

Use this profile to configure the event Log configuration table for configuration items related to each Event Log type.

To View Type Admins

On the SBC main screen, go to Administration > Accounting and Logs > Event Log > Type Admin. The Type Admin window is displayed.

Event Log - Type Admin

By default only ten entries are displayed in a view. You can choose the number of entries to be displayed under the Show entries drop down box. 

To Edit Type Admins

To edit any of the created Type Admins, click the radio button next to the specific admin name.

Event Log - Highlighted Type Admin

The Edit Selected Type Admin window is displayed below.

Event Log - Edit Selected Type Admin 1

The following parameters are displayed:

Type Admin

 

Parameter

Description

Type

The type of the event log. Each type has separate configuration parameters and logs to a separate file.

State

Specifies the requested state of the given Event Log type.

  • disabled – Logging is not activated.
  • enabled – (default) Logging is activated.
  • rollfile

 Accounting logs cannot be disabled.

File Count

The number of event log files that will be maintained for this event type. All event types will overwrite the oldest file when the file count is exceeded. A warning will be issued when the count approaches the maximum. Enter a value between the range 1and 2048.

File Size

The maximum size (in KB) that a single event log file will ever grow to. Enter a value between in the range (256..65535) KB

Message Queue Size

The number of event log message entries to buffer before writing them to disk. The size may be a value between 2 and 32 (inclusive). Enter a value between in the range 2 and 32.

Save To

Save events. The values are:

  • None - Events are not saved
  • Disk - Events are saved to Disk

Filter Level

The filter severity level of events. Events that are at least as severe as the designated level will be logged. no events type suppresses all events of this type from being logged.

Rollover Start Time

Specifies the start time for event log rollover. The format is CCYY-MM-DDTHH:MM:SS. For example: 2010-01-01T01:01:01.

Rollover Interval

Enter the number of seconds. The event log rollover interval.

Rollover Type

Event log rollover type. Options are:

  • nonrepetitive (default) – The rollover will occur once at the specified single instance.
  • repetitive – The rollover will occur repeatedly at the specified intervals.

Rollover Action

Event log rollover actions. The values are:

  • Start - Start event log rollover at specified starting time.
  • Stop - Stop event log rollover.

File Write Mode

Identifies event log NFS write mode. The values are:

  • DEFAULT - Log data is written to NFS as 1344 byte packet.
  • OPTIMIZE - Log data is written to NFS as 8000 byte packet.
    Optimize write mode results in IP fragmentation but yields better throughput.

Syslog State

Enable flag to log events of specified type to syslog.

  • disabled (default)
  • enabled

Syslog Remote host

Specifies the remote host where the messages are written to the syslog. This must be a valid host name or a valid IP address. The value ranges from 0 to 255

Syslog Remote Protocol

Specifies the protocol to use to send messages to the remote syslog. Options are:

  • relp
  • tcp (default)
  • udp

Syslog Remote Port

The IP Port Number. Specifies the port to use to send messages to the remote syslog. The value ranges from 1 to 65535 and the default value is 514.

Rename Open Files

Enable this flag to append an ".OPEN" extension to accounting and files which are open for writing.

  • disabled (default)
  • enabled

NOTE: You must enable the global callTrace signalingPacketCapture parameter (set state to "enable") to capture SIP and H.323 packets (refer to Call Trace - CLI for configuration details).

Once signalingPacketCapture is enabled, any subsequent changes to SBC device configurations or filter information will not be available to signaling packet captures until signalingPacketCapture is reset (state is disabled, and then re-enabled).

Make the required changes and click Save to save the changes.

For more information on SBC's support for remote syslog servers and the supported log types, refer to Supported Log Types.

  • No labels