In this section:
Use this window to configure event log handling for each event log type.
On the SBC main screen, go to Administration > Accounting and Logs > Event Log > Type Admin. The Type Admin window is displayed showing a row for each type of event log.
To edit the configuration for any Event Log type, click the radio button next to the specific Log Type. The Edit Selected Type Admin window opens for the selected type.
The following parameters are displayed:
Parameter | Description |
---|---|
Type | The type of the event log. Each type has separate configuration parameters and logs to a separate file. |
State | Specifies the requested state of the given event log type.
Accounting logs cannot be disabled. |
File Count | The number of event log files that will be maintained for this event type. All event types will overwrite the oldest file when the file count is exceeded. A warning will be issued when the count approaches the maximum. Enter a value between the range 1 and 2048. |
File Size | The maximum size (in KB) that a single event log file will ever grow to. Enter a value between in the range (256-65535) KB |
Message Queue Size | The number of event log message entries to buffer before writing them to disk. The size may be a value between 2 and 32 . |
Save To | Save events. The values are:
|
Filter Level | The filter severity level of events. Events that are at least as severe as the designated level will be logged. Noevents suppresses all events of this type from being logged. |
Rollover Start Time | Specifies the start time for event log rollover. The format is CCYY-MM-DDTHH:MM:SS. For example: 2010-01-01T01:01:01. |
Rollover Interval | Enter the number of seconds for the event log rollover interval. |
Rollover Type | Event log rollover type. Options are:
|
Rollover Action | Event log rollover actions. The values are:
|
File Write Mode | Identifies event log NFS write mode. The values are:
|
Syslog State | Enable this option to log events of specified type to syslog.
|
Rename Open Files | Enable this option to append an ".OPEN" extension to accounting and files which are open for writing.
NOTE: You must enable the Signaling Packet Capture State parameter to capture SIP and H.323 packets (refer to Call Trace and Packet Capture - Signaling Packet Capture for configuration details). Once Signaling Packet Capture State is enabled, any subsequent changes tothe SBC device configurations or filter information will not be available to signaling packet captures until the state is reset (state is disabled, and then re-enabled). |
Disk Throttle Limit | Specifies the limit on INFO level messages logged to the disk in one second. A value of 0 disables the limit. |
Event Log Validation | Specifies whether the logs at rest for this log type should be cryptographically hashed. The values are:
|
Make the required changes and click Save to save the changes.
For more information on SBC's support for remote syslog servers and the supported log types, refer to Supported Log Types.