Log Message Format Description
Format of Log Message
The SYSLOG protocol uses UDP port 514 to transmit log messages. Any UDP packet on port 514 is considered a log message. The output format of a log message is shown in Figure 3-1. The log format on a switch is shown in Figure 3-1.
Fields
Field |
Description |
|---|---|
TimeStamp UTC |
It is the time when a log message is generated and sent to the log host. By default, it is the coordinated universal time (UTC), which can be configured to the host time. TimeStamp and HostName are separated by a space. |
HostName |
It is the system name of a local host. The default HostName is HUAWEI. HostName and ModuleName are separated by a space. |
Huawei Identity |
%% refers to the identity of Huawei, indicating that the log is produced by a Huawei product. |
Version |
dd is a two-digit number starting from 01. It specifies the version of a log format. |
ModuleName |
It specifies the module that generates log messages. ModuleName and Severity are separated by a slash (/). |
Severity |
Log messages are classified into eight severity levels, ranging from 0 to 7. Severity and Brief are separated by a slash (/). |
Brief |
It is a phrase that summarizes information. Also known as alias. |
Log Flag |
The flag (l) and Description are separated by a colon (:). |
Count |
It specifies the log serial number. |
Description |
It is a string of characters that describe a detailed log message. It is output by a module to the information center. It is filled in by a module at each output time. |
Example
Aug 6 2011 20:34:46 HUAWEI %% 01 HWCM/5/EXIT(l)[1]: exit from configure mode
The log message was generated at UTC time 20:34:46, Aug 6, 2011.
The host name is HUAWEI.
The log message was sent by the HWCM module.
The severity level of this log message is 5.
The description of this log message is exit from configuration mode.
Jan 8 2013 03:58:15+07:00 HUAWEI %% 01 HWCM/5/EXIT(l)[1]: exit from configure mode
The log message was generated at the local host time 10:58:15, Jan 8, 2013.
The host name is HUAWEI.
The log message was sent by the HWCM module.
The severity level of this log message is 5.
The description of this log message is exit from configuration mode.