Monitor and troubleshoot
Documents under this category describe tools that can help you monitor, diagnose, and troubleshoot SR Linux software. This section also includes Log Event documentation to help you interpret log messages generated by SR Linux software.
- Event Handler Guide
  This document describes the functionality and configuration for the event handler framework on the Nokia Service Router Linux (SR Linux).
- Log Events Guide
  This document provides guidance for operators to interpret log events for the Nokia Service Router Linux (SR Linux).
- OAM and Diagnostics Guide
- Troubleshooting Toolkit
  This document describes how to use and configure diagnostic tools for the Nokia Service Router Linux (SR Linux).

macsec

CAisTornDown

Table 1. CAisTornDown properties
Property name	Value
Application name	macsec
Event name	CAisTornDown
Default severity	notice
Message format string	Existing CA has been torn down for Policy policy_name on interface interface_name for CKN CKN local MI:SCI MI:SCI.
Cause	An existing Connectivity Association has been torn down.
Effect	Macsec is being torn down.
Raising event	N/A
Clearing event	N/A

MACsecConfigureOnInterface

Table 2. MACsecConfigureOnInterface properties
Property name	Value
Application name	macsec
Event name	MACsecConfigureOnInterface
Default severity	notice
Message format string	MACsec policy policy_name with key-chian key_chain_name has been configured on interface interface_name
Cause	The MACsec policy has been configured on an interface.
Effect	MACsec Policy has been configured on the interface but not protecting as it is not enabled.
Raising event	N/A
Clearing event	N/A

macsecDatapathReplayDetected

Table 3. macsecDatapathReplayDetected properties
Property name	Value
Application name	macsec
Event name	macsecDatapathReplayDetected
Default severity	notice
Message format string	MACsec replay has been detected for policy policy_name on interface interface_name SCI SCI with replay count of count
Cause	A MACsec datapath replay attack is detected.
Effect	The count of replay packets are displayed.
Raising event	N/A
Clearing event	N/A

MACsecDisabledFromInterface

Table 4. MACsecDisabledFromInterface properties
Property name	Value
Application name	macsec
Event name	MACsecDisabledFromInterface
Default severity	notice
Message format string	MACsec policy policy_name has been disabled on interface interface_name
Cause	The MACsec policy has been disable from an interface.
Effect	Interface is not protected with MACsec.
Raising event	N/A
Clearing event	N/A

MACsecEnabledOnInterface

Table 5. MACsecEnabledOnInterface properties
Property name	Value
Application name	macsec
Event name	MACsecEnabledOnInterface
Default severity	notice
Message format string	MACsec policy policy_name has been admin enabled on interface interface_name
Cause	The MACsec policy has been enabled on an interface.
Effect	Interface is protected with MACsec Encryption.
Raising event	N/A
Clearing event	N/A

macsecPnExhaustion

Table 6. macsecPnExhaustion properties
Property name	Value
Application name	macsec
Event name	macsecPnExhaustion
Default severity	notice
Message format string	MACsec PN exhaustion has been detected for policy policy_name on interface interface_name SCI:AN SCI:AN and MI MI
Cause	MACsec Packet Number Exhaustion is detected and the system is generating a new SAK.
Effect	The system will generate a new SAK.
Raising event	N/A
Clearing event	N/A

MACsecRemovedFromInterface

Table 7. MACsecRemovedFromInterface properties
Property name	Value
Application name	macsec
Event name	MACsecRemovedFromInterface
Default severity	notice
Message format string	MACsec policy policy_name with key-chain key_chain_name has been removed from interface interface_name
Cause	The MACsec policy has been removed from an interface.
Effect	The MACsec policy has been removed and the interface is not protected any longer.
Raising event	N/A
Clearing event	N/A

maxNumberOfPeers

Table 8. maxNumberOfPeers properties
Property name	Value
Application name	macsec
Event name	maxNumberOfPeers
Default severity	notice
Message format string	MACsec Policy policy_name has been configured with maximum number of peers maxNumberOfPeers and has numberOfActivePeers active peers
Cause	The MACsec policy has more active peers than maximum number of peers.
Effect	No new active peers can be established.
Raising event	N/A
Clearing event	N/A

mkaReplayDetected

Table 9. mkaReplayDetected properties
Property name	Value
Application name	macsec
Event name	mkaReplayDetected
Default severity	notice
Message format string	MKA replay has been detected for policy policy_name on interface interface_name for CKN CKN with MI:SCI MI:SCI has replay count of count
Cause	A MKA replay attack is detected.
Effect	The count of replay packets are displayed.
Raising event	N/A
Clearing event	N/A

MkaSessionEnded

Table 10. MkaSessionEnded properties
Property name	Value
Application name	macsec
Event name	MkaSessionEnded
Default severity	notice
Message format string	MKA Policy policy_name on interface interface_name with MI:SCI MI:SCI has been ended.
Cause	The MKA policy has ended on an interface.
Effect	MKA has ended on the interface and the MACsec status will go down.
Raising event	N/A
Clearing event	N/A

MkaSessionEstablished

Table 11. MkaSessionEstablished properties
Property name	Value
Application name	macsec
Event name	MkaSessionEstablished
Default severity	notice
Message format string	MKA Policy policy_name on interface interface_name with MI:SCI MI:SCI has established and has key server priority key_server_priority
Cause	The MKA policy has been established on an interface.
Effect	MKA will be establish to distribute SAKs.
Raising event	N/A
Clearing event	N/A

newCAisCreated

Table 12. newCAisCreated properties
Property name	Value
Application name	macsec
Event name	newCAisCreated
Default severity	notice
Message format string	A new CA has been created for Policy policy_name on interface interface_name for CKN CKN local MI:SCI MI:SCI.
Cause	A new Connectivity Association has been created.
Effect	Macsec is being established.
Raising event	N/A
Clearing event	N/A

newRxSakInstalled

Table 13. newRxSakInstalled properties
Property name	Value
Application name	macsec
Event name	newRxSakInstalled
Default severity	notice
Message format string	Rx SAK installed policy_name on interface interface_name with MI:SCI MI:SCI
Cause	An RX Sak has been installed for macsec.
Effect	Macsec will switch to the new RX SAK for decryption after it is installed.
Raising event	N/A
Clearing event	N/A

newTxSakInstalled

Table 14. newTxSakInstalled properties
Property name	Value
Application name	macsec
Event name	newTxSakInstalled
Default severity	notice
Message format string	Tx SAK installed policy_name on interface interface_name with MI:SCI MI:SCI
Cause	A TX Sak has been installed for macsec.
Effect	Macsec will switch to the new TX SAK after it is installed for encryption.
Raising event	N/A
Clearing event	N/A

November 5, 2026