Monitor and troubleshoot
Documents under this category provide information about monitoring, diagnosing, and troubleshooting router issues.
- 7450 and 7750 Troubleshooting Guide
- 7950 Troubleshooting Guide
- Log Events Guide
  This guide provides information about log events.
- Log Events Search Tool
  A searchable HTML list of the SR OS events.
- OAM and Diagnostics Guide
  This guide describes how to configure features such as service mirroring and Lawful Intercept (LI), and how to use the Operations, Administration, and Maintenance (OAM) and diagnostics tools.

USER

cli_config_io

Table 1. cli_config_io properties
Property name	Value
Application name	USER
Event ID	2011
Event name	cli_config_io
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$: $prompt$ $message$
Cause	The user entered an authorized configuration command in the classic CLI.
Effect	The configuration was changed by the CLI command.
Recovery	No recovery is required

cli_unauth_config_io

Table 2. cli_unauth_config_io properties
Property name	Value
Application name	USER
Event ID	2013
Event name	cli_unauth_config_io
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$. $message$: $prompt$ $command$
Cause	The user entered an unauthorized configuration command in the classic CLI.
Effect	The CLI command was not processed.
Recovery	No recovery is required.

cli_unauth_user_io

Table 3. cli_unauth_user_io properties
Property name	Value
Application name	USER
Event ID	2012
Event name	cli_unauth_user_io
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$. $message$: $prompt$ $command$
Cause	The user entered an unauthorized command in the classic CLI.
Effect	The CLI command was not processed.
Recovery	No recovery is required.

cli_user_io

Table 4. cli_user_io properties
Property name	Value
Application name	USER
Event ID	2009
Event name	cli_user_io
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$: $prompt$ $message$
Cause	The user entered an authorized command in the classic CLI.
Effect	The CLI command was processed.
Recovery	No recovery is required.

cli_user_login

Table 5. cli_user_login properties
Property name	Value
Application name	USER
Event ID	2001
Event name	cli_user_login
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$ logged in
Cause	A user successfully authenticated for login.
Effect	A user access session was started.
Recovery	No recovery is required.

cli_user_login_failed

Table 6. cli_user_login_failed properties
Property name	Value
Application name	USER
Event ID	2003
Event name	cli_user_login_failed
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$ failed authentication
Cause	A user failed authentication.
Effect	The user access session was not started. The user is given another opportunity to authenticate himself.
Recovery	No recovery is required.

cli_user_login_max_attempts

Table 7. cli_user_login_max_attempts properties
Property name	Value
Application name	USER
Event ID	2004
Event name	cli_user_login_max_attempts
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$ attempted more than $maxAttempts$ times to log in, user is locked out
Cause	A user failed to authenticate in more than the permitted number of retries.
Effect	If telnet the session terminates; console no effect
Recovery	No recovery is required.

cli_user_logout

Table 8. cli_user_logout properties
Property name	Value
Application name	USER
Event ID	2002
Event name	cli_user_logout
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$ logged out
Cause	A user logged out.
Effect	The user access session ended.
Recovery	No recovery is required.

ftp_user_login

Table 9. ftp_user_login properties
Property name	Value
Application name	USER
Event ID	2005
Event name	ftp_user_login
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	FTP user from $srcAddr$ logged in
Cause	A user successfully authenticated for login.
Effect	A user access session was started.
Recovery	No recovery is required

ftp_user_login_failed

Table 10. ftp_user_login_failed properties
Property name	Value
Application name	USER
Event ID	2007
Event name	ftp_user_login_failed
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	FTP user from $srcAddr$ failed authentication
Cause	A user failed authentication.
Effect	The user access session was not started. The user is given another opportunity to authenticate himself.
Recovery	No recovery is required.

ftp_user_login_max_attempts

Table 11. ftp_user_login_max_attempts properties
Property name	Value
Application name	USER
Event ID	2008
Event name	ftp_user_login_max_attempts
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$ attempted more than $maxAttempts$ times to log in, user is locked out
Cause	A user failed to authenticate in more than the permitted number of retries.
Effect	The ftp session was terminated.
Recovery	No recovery is required.

ftp_user_logout

Table 12. ftp_user_logout properties
Property name	Value
Application name	USER
Event ID	2006
Event name	ftp_user_logout
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	FTP user from $srcAddr$ logged out
Cause	A user logged out.
Effect	The user access session ended.
Recovery	No recovery is required.

grpc_user_login

Table 13. grpc_user_login properties
Property name	Value
Application name	USER
Event ID	2014
Event name	grpc_user_login
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	gRPC user from $srcAddr$ logged in
Cause	A user successfully authenticated for login.
Effect	A user access session was started.
Recovery	No recovery is required

grpc_user_login_failed

Table 14. grpc_user_login_failed properties
Property name	Value
Application name	USER
Event ID	2016
Event name	grpc_user_login_failed
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	gRPC user from $srcAddr$ failed authentication
Cause	A user failed authentication.
Effect	The user access session was not started. The user is given another opportunity to authenticate himself.
Recovery	No recovery is required.

grpc_user_login_max_attempts

Table 15. grpc_user_login_max_attempts properties
Property name	Value
Application name	USER
Event ID	2017
Event name	grpc_user_login_max_attempts
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$ attempted more than $maxAttempts$ times to log in, user is locked out
Cause	A user failed to authenticate in more than the permitted number of retries.
Effect	The gRPC session was terminated.
Recovery	No recovery is required.

grpc_user_logout

Table 16. grpc_user_logout properties
Property name	Value
Application name	USER
Event ID	2015
Event name	grpc_user_logout
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	gRPC user from $srcAddr$ logged out
Cause	A user logged out.
Effect	The user access session ended.
Recovery	No recovery is required.

netconf_user_login

Table 17. netconf_user_login properties
Property name	Value
Application name	USER
Event ID	2018
Event name	netconf_user_login
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	Netconf user from $srcAddr$ logged in
Cause	A user successfully authenticated for login.
Effect	A user access session was started.
Recovery	No recovery is required.

netconf_user_login_failed

Table 18. netconf_user_login_failed properties
Property name	Value
Application name	USER
Event ID	2020
Event name	netconf_user_login_failed
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	Netconf user from $srcAddr$ failed authentication
Cause	A user failed authentication.
Effect	The user access session was not started. The user is given another opportunity to authenticate himself.
Recovery	No recovery is required.

netconf_user_login_max_attempts

Table 19. netconf_user_login_max_attempts properties
Property name	Value
Application name	USER
Event ID	2021
Event name	netconf_user_login_max_attempts
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	User from $srcAddr$ attempted more than $maxAttempts$ times to log in, user is locked out
Cause	A user failed to authenticate in more than the permitted number of retries.
Effect	The netconf session was terminated.
Recovery	No recovery is required.

netconf_user_logout

Table 20. netconf_user_logout properties
Property name	Value
Application name	USER
Event ID	2019
Event name	netconf_user_logout
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	Netconf user from $srcAddr$ logged out
Cause	A user logged out.
Effect	The user access session ended.
Recovery	No recovery is required.

snmp_user_set

Table 21. snmp_user_set properties
Property name	Value
Application name	USER
Event ID	2010
Event name	snmp_user_set
SNMP notification prefix and OID	N/A
Default severity	minor
Source stream	change
Message format string	SNMP user from $srcAddr$> $vbList$
Cause	An SNMP SET request was received.
Effect	Configuration was changed by an SNMP SET operation.
Recovery	No recovery is required.

October 31, 2023