...
The Event Log object allows you to create event log filters to capture debug, security, system, trace, and accounting events using following parameters:
...
| Multiexcerpt |
|---|
| MultiExcerptName | typeAdmin1 |
|---|
|
| Caption |
|---|
| 0 | Table |
|---|
| 1 | Type Admin Event Log Parameters (set command) |
|---|
| |
Parameter | Length/Range | Description |
|---|
typeAdmin
| N/A | Event Log configuration table for configuration items related to each Event Log type. | <event_type>
| N/A | Specifies the type of event log being configured: acct – System account data. These files have .ACT extensions.audit – System audit data. These files contain a record of all management interactions that modify the state of the system. These files have .AUD extensions. It includes all the changes made via the CLI and the Netconf interface. (This attribute is only available to an Administrator)debug – System debugging data. These files have .DBG extensions.packet – Packet information details. These files have .PKT extensions. If enabled, stores the packet details to .PKT files.security – Security level events. These files have .SEC extensions. (This attribute is only available to an Administrator)system – System level events. These files have .SYS extensions.trace – System trace data. These files have .TRC extensions.
| Note |
|---|
Syslog is not supported for acct and packet event types. |
| fileCount
| 1-1024 | Specifies the number of event log files that will be maintained for this event type. (default = 32). | fileSize
| 256-65535 | Maximum size (in KB) that a single event log file will ever grow to. (default = 2048). | fileWriteMode
| N/A | Event log NFS write mode. Options are: default – Log data is written as a 1344-byte packet.optimize – Log data is written as a 8000-byte packet. Optimize write mode results in IP fragmentation but yields better throughput.
| filterLevel
| N/A | Events that are at least as severe as the designated level will be logged. Options are: critical – log only events of this threshold.info – log every possible event.major – log major and critical events only.minor – log all events other than information.noevents – do not log any events.
| Note |
|---|
The command to set the filterLevel for the acct event type is no longer applicable. |
| messageQueueSize
| 2-32 | The number of event log message entries to buffer before writing to disk. (default = 10). | renameOpenFiles
| N/A | Enable this flag to append an ".OPEN" extension to accounting and files which are open for writing. disabled (default)enabled
| Note |
|---|
You must enable the global callTrace signalingPacketCapture parameter (set state to "enable") to capture SIP and H.323 packets (see Call Trace - CLI for configuration details). Once signalingPacketCapture is enabled, any subsequent changes to SBC device configurations or filter information will not be available to signaling packet captures until signalingPacketCapture is reset (state is disabled, and then re-enabled). |
| rolloverAction
| N/A | Event log rollover actions. Options are: start – Start rollover action.stop – Stop rollover action.
| rolloverInterval
| 0-31536000 | Event log rollover interval, in seconds. | rolloverStartTime
| N/A | Specifies the start time for event log rollover. The format is CCYY-MM-DDTHH:MM:SS. For example: 2010-01-01T01:01:01 | rolloverType
| N/A | Event log rollover type. Options are: nonrepetitive (default) – The rollover will occur once at the specified single instance.repetitive – The rollover will occur repeatedly at the specified intervals.
| saveTo
| N/A | Use flag to specify that the events are saved to disk or not saved. | state
| N/A | Specifies the requested state of the given Event Log type. disabled – Logging is not activated.enabled – (default) Logging is activated.rollfile
Accounting logs cannot be disabled. | syslogRemoteHost
| 0-255 | The remote host where the messages are written to the syslog. | syslogRemotePort
| 1-65535 | Specifies the port to use to send messages to the remote syslog. Default value is 514. | syslogRemoteProtocol
| N/A | The protocol to use to send messages to the remote syslog. Options are: | syslogState
| N/A | Enable flag to log events of specified type to syslog. disabled (default)enabled
|
|
...