About log events

Log events that are forwarded to a destination are formatted in a way appropriate for the specific destination, whether recorded to a file or sent as an SNMP trap, but log events have common elements or properties. All application generated events have the following properties:

  • A time stamp in UTC or local time.

  • The generating application.

  • A unique event ID within the application.

  • A router name identifying the router instance that generated the event.

  • A subject identifying the affected object.

  • A short text description.

Note:

The Message Format String lists the log event parameters available when the log event is output in CLI using the show log command, output to a file for file-based event logs, or output to a syslog receiver. However, for some log events their parameters may vary when the event is output to SNMP destination, NETCONF destination, or triggers an EHS script. To see a complete list of a log event parameters available to EHS scripts and NETCONF notifications, use the CLI command show log event-parameters for that specific event. For further information about variables found in the message format strings, please see the associated SNMP Notification definition in the SR OS MIBs.

The general format for a log event with either a memory, console or file destination is as follows.

nnnn <time> TZONE <severity>: <application> #<event-id> <vrtr-name> <subject> 
<message>

252 2013/05/07 16:21:00.76 UTC WARNING: SNMP #2005 Base my-interface-abc 
"Interface my-interface-abc is operational"

The specific elements that compose the general format are described in Log Entry Field Descriptions.

Table 1. Log Entry Field Descriptions

Label

Description

nnnn

The log entry sequence number.

<time>

The UTC or local date stamp for the log entry in YYYY/MM/DD format followed by the UTC time stamp in HH:MM:SS.SS format.

YYYY — Year

MM — Month

DD — Date

HH — Hour

MM — Minute

SS.SS — Seconds

TZONE

The time zone (for example, UTC, EDT) as configured by configure log log-id x time-format.

<severity>

The severity level of the event:

  • CLEARED — A cleared event (severity number 1)

  • INFO — An indeterminate/informational severity event (severity level 2)

  • CRITICAL — A critical severity event (severity level 3)

  • MAJOR — A major severity event (severity level 4)

  • MINOR — A minor severity event (severity level 5)

  • WARNING — A warning severity event (severity 6)

<application>

The name of the application generating the log message.

<event-id>

The application event ID number.

<vrtr-name>

The router name (vrtr-name, for example, vprn101 or Base), in a format used by the logging system, representing the router instance that generated the event.

<subject>

The subject/affected object for the event.

<message>

A text description of the event for CLI (show log), log files and syslog output.

The variables in the <message> string do not necessarily apply to SNMP, NETCONF or EHS scripts. For the list of variables available to EHS scripts and NETCONF notifications, use the CLI command show log event-parameters.

For further information about variables found in the <message> strings, please see the associated SNMP Notification definition in the SR OS MIBs.