Monitor and troubleshoot
Documents under this category describe tools that can help you monitor, diagnose, and troubleshoot SR Linux software. This section also includes Log Event documentation to help you interpret log messages generated by SR Linux software.
- Event Handler Guide
  This document describes the functionality and configuration for the event handler framework on the Nokia Service Router Linux (SR Linux).
- Log Events Guide
  This document provides guidance for operators to interpret log events for the Nokia Service Router Linux (SR Linux).
- OAM and Diagnostics Guide
- Troubleshooting Toolkit
  This document describes how to use and configure diagnostic tools for the Nokia Service Router Linux (SR Linux).

aaa

cMAGcUserAuthenticationFailed

Table 1. cMAGcUserAuthenticationFailed properties
Property name	Value
Application name	aaa
Event name	cMAGcUserAuthenticationFailed
Default severity	warning
Message format string	User user_name authentication failed on cMAG-c web UI from host remote_host
Cause	The specified user has failed authentication
Effect	None.
Raising event	N/A
Clearing event	N/A

cMAGcUserAuthenticationSucceeded

Table 2. cMAGcUserAuthenticationSucceeded properties
Property name	Value
Application name	aaa
Event name	cMAGcUserAuthenticationSucceeded
Default severity	notice
Message format string	User user_name successfully authenticated on cMAG-c web UI from host remote_host
Cause	The specified user has successfully authenticated
Effect	None.
Raising event	N/A
Clearing event	N/A

serverDown

Table 3. serverDown properties
Property name	Value
Application name	aaa
Event name	serverDown
Default severity	error
Message format string	Server server_address in group server_group is down
Cause	The specified server is down, either via being unreachable, or a timeout
Effect	The specified server can no longer be used for authentication, authorization, or accounting transactions.
Raising event	N/A
Clearing event	N/A

serverGroupDown

Table 4. serverGroupDown properties
Property name	Value
Application name	aaa
Event name	serverGroupDown
Default severity	error
Message format string	All servers in server group server_group are down
Cause	All servers within the specified server group are no longer available
Effect	The specified server group can no longer be used for authentication, authorization, or accounting transactions.
Raising event	N/A
Clearing event	N/A

serverGroupUp

Table 5. serverGroupUp properties
Property name	Value
Application name	aaa
Event name	serverGroupUp
Default severity	error
Message format string	Servers in server group server_group are up
Cause	Servers within the specified server group are available
Effect	The specified server group can be used for authentication, authorization, or accounting transactions.
Raising event	N/A
Clearing event	N/A

serverRouteUnavailable

Table 6. serverRouteUnavailable properties
Property name	Value
Application name	aaa
Event name	serverRouteUnavailable
Default severity	error
Message format string	No route available to reach remote server server_address in server group server_group via network instance network_instance
Cause	No routes are available in the specified network instance to reach the remote server
Effect	The specified server can no longer be used for authentication, authorization, or accounting transactions.
Raising event	N/A
Clearing event	N/A

serverTimeout

Table 7. serverTimeout properties
Property name	Value
Application name	aaa
Event name	serverTimeout
Default severity	error
Message format string	Server server_address in group server_group has timed out
Cause	The connection between the AAA manager and the remote server has timed out. The server will be tried again in 30 seconds, or immediately if a valid response is received
Effect	The specified server can no longer be used for authentication, authorization, or accounting transactions.
Raising event	N/A
Clearing event	N/A

serverUp

Table 8. serverUp properties
Property name	Value
Application name	aaa
Event name	serverUp
Default severity	error
Message format string	Server server_address in group server_group is up
Cause	The specified server is up
Effect	The specified server can be used for authentication, authorization, or accounting transactions.
Raising event	N/A
Clearing event	N/A

sessionClosed

Table 9. sessionClosed properties
Property name	Value
Application name	aaa
Event name	sessionClosed
Default severity	notice
Message format string	Closed session session_id for user user_name from host remote_host in network-instance network_instance
Cause	The specified user has closed a session on the system
Effect	None.
Raising event	N/A
Clearing event	N/A

sessionDisconnected

Table 10. sessionDisconnected properties
Property name	Value
Application name	aaa
Event name	sessionDisconnected
Default severity	notice
Message format string	Session session_id for user user_name from remote host remote_host in network-instance network_instance disconnected by administrative action
Cause	A specific session for a user has been disconnected from the system by an administrator
Effect	The specified user is disconnected.
Raising event	N/A
Clearing event	N/A

sessionIdleDisconnected

Table 11. sessionIdleDisconnected properties
Property name	Value
Application name	aaa
Event name	sessionIdleDisconnected
Default severity	notice
Message format string	Session session_id for user user_name from remote host remote_host in network-instance network_instance disconnected by timeout
Cause	The specified user session disconnected from the system due to an idle timeout
Effect	The specified user is disconnected.
Raising event	N/A
Clearing event	N/A

sessionOpened

Table 12. sessionOpened properties
Property name	Value
Application name	aaa
Event name	sessionOpened
Default severity	notice
Message format string	Opened session session_id for user user_name from host remote_host in network-instance network_instance
Cause	The specified user has opened a session on the system
Effect	None.
Raising event	N/A
Clearing event	N/A

tacacsRoleInvalid

Table 13. tacacsRoleInvalid properties
Property name	Value
Application name	aaa
Event name	tacacsRoleInvalid
Default severity	error
Message format string	Invalid vsa_name vsa_value received from the TACACS+ server for user user_name
Cause	The TACACS+ server provided an invalid role parameter.
Effect	The TACACS+ user is disconnected.
Raising event	N/A
Clearing event	N/A

userAuthenticationFailed

Table 14. userAuthenticationFailed properties
Property name	Value
Application name	aaa
Event name	userAuthenticationFailed
Default severity	warning
Message format string	User user_name authentication failed from host remote_host in network-instance network_instance
Cause	The specified user has failed authentication
Effect	None.
Raising event	N/A
Clearing event	N/A

userAuthenticationSucceeded

Table 15. userAuthenticationSucceeded properties
Property name	Value
Application name	aaa
Event name	userAuthenticationSucceeded
Default severity	notice
Message format string	User user_name on session session_id successfully authenticated from host remote_host in network-instance network_instance
Cause	The specified user has successfully authenticated
Effect	None.
Raising event	N/A
Clearing event	N/A

userLockoutReset

Table 16. userLockoutReset properties
Property name	Value
Application name	aaa
Event name	userLockoutReset
Default severity	warning
Message format string	User user_name is unlocked
Cause	Tools command is used to unlock this user or when the lockout timer expires
Effect	None.
Raising event	N/A
Clearing event	N/A

userLockoutSet

Table 17. userLockoutSet properties
Property name	Value
Application name	aaa
Event name	userLockoutSet
Default severity	warning
Message format string	User user_name is locked out
Cause	The specified user has been locked out after successive authentication failed attempts within a specific time duration
Effect	None.
Raising event	N/A
Clearing event	N/A

userPasswordChanged

Table 18. userPasswordChanged properties
Property name	Value
Application name	aaa
Event name	userPasswordChanged
Default severity	notice
Message format string	Password for user user_name has changed
Cause	The user has changed his password or it was changed by a user with administrative rights
Effect	None.
Raising event	N/A
Clearing event	N/A

userPasswordExpired

Table 19. userPasswordExpired properties
Property name	Value
Application name	aaa
Event name	userPasswordExpired
Default severity	warning
Message format string	User user_name password has expired
Cause	The specified user has not changed his password before aging time
Effect	None.
Raising event	N/A
Clearing event	N/A

July 16, 2026