Managing Syslog Messages

Updated
  • Updated on Jul 31, 2025
  • Published on Jan 7, 2022
  • 2 minute(s) read
  • AH
  • AC
 Prev Next

Syslog (System Logging) collects local events and notifications from different applications in a structured form and then stores them in a database in chronological order. The syslog database can be used to analyze and diagnose software or hardware malfunctions.

Messages are reported into the system logger and they are kept or removed depending on the system logger level. The system logger also supports remote logging. You can send messages to an external computer.

View System Logs

To view system logs:

  1. Navigate to System â–¶ Agent â–¶ Syslog.
    In Syslog, system log entries display.
  2. (Optional) Click Refresh to update to the latest messages.

image.png

Enable Syslog-NG

Enable access to additional syslog-ng configuration options.

To enable syslog-ng:

  1. Navigate to System â–¶ Agent â–¶ Syslog.
  2. In Syslog mode configuration, check syslog-ng mode.
  3. Click Apply.

Configure Global System Log Settings

To configure global system log settings:

  1. Navigate to System â–¶ Agent â–¶ Syslog.
  2. In Syslog configuration, complete the fields as required.
    For more information, see Syslog Configuration Parameters.
  3. Click Apply.

Configure Remote System Log Settings

To configure remote system log settings:

  1. Navigate to System â–¶ Agent â–¶ Syslog.
  2. In Remote syslog (number), complete the fields as required.
    For more information, see Remote Syslog (Number) Parameters.
  3. Click Apply.

Syslog Mode Configuration Parameters

image.png

Parameter Description
syslog-ng mode Enable to access additional configuration options.
Default setting: disabled.
Disabling will reset unsupported syslog parameters and options to factory default.

Syslog Configuration Parameters

Note: Parameters may vary depending on the syslog-ng mode configuration.
image.png

Parameter Description
Facility configuration Device facility to log all messages using a user-defined facility instead of the default ones.
  • LOCAL0
  • LOCAL1
  • LOCAL2
  • LOCAL3
  • LOCAL4
  • LOCAL5
  • LOCAL6
  • LOCAL7
Level configuration Global logging maximum severity level. Applies to the local syslog.

  1. Emergency: system is unusable
  2. Alert: action must be taken immediately
  3. Critical: critical conditions
  4. Error: error conditions
  5. Warning: warning conditions
  6. Notice: normal, but significant, condition (Default)
  7. Info: informational message
  8. Debug: debug-level message

The level you choose enables all messages from the specified level and all messages from lower levels.
Remote level configuration Severity level of logs being sent to remote logging server. Applies to the logging to the remote server.

Note: When syslog-ng mode is disabled, both parameters become coupled to one (which is inherited from the Level configuration value). In this scenario, only Level configuration remains configurable and applies to both the local syslog and logging to the remote server.
Protocol configuration Streaming log protocol.
  • Legacy (Default)
  • RFC-3164
  • RFC-5424

Remote Syslog (Number) Parameters

image.png

Parameter Description
Enable Enables or disables sending messages to this remote server.
Log type Type of logging application.
Transport Connection protocol used to communicate with remote logging server.
  • TCP
  • UDP (Default)
  • TLS
Host configuration Domain name or IP of remote logging server.
Supported string-based formats: IPv4 address, IPv6 address, or hostname (FQDN).
Port configuration Port number of remote logging server.
Supported range: 1...65535
Default value: 514

© 2025 Cisco and/or its affiliates. All rights reserved.
 
For more information about trademarks, please visit: Cisco trademarks
For more information about legal terms, please visit: Cisco legal terms
For legal information about Accedian Skylight products, please visit: Accedian legal terms and tradmarks