Understanding the Implementation of System Log Messages on the QFabric System
This topic provides an overview of system log messages (syslog) as implemented on the QFabric system.
The QFabric system monitors events that occur on its component devices and distributes system log messages about those events to all external system log message servers (hosts) that are configured. Messages are stored in the QFabric system database for viewing only using the show log command. Component devices may include Node devices, Interconnect devices, Director devices, and the Virtual Chassis.
You configure system log messages by using the host and file statements at the [edit system syslog] hierarchy level. Use the show log filename operational mode command to view the messages.
 | Note:
On the QFabric system, a syslog file named |
The QFabric system supports the following system log message features:
- The file filename and host hostname statements at the [edit system syslog] hierarchy level are supported. Other statements at that hierarchy level are not supported.
- You can specify the maximum amount of data that is displayed when you issue the show log filename command by configuring the file filename archive maximum-file-size statement.
- You can specify one or more system log message servers to receive messages, which are sent to each server that is configured.
- If you configured an alias for a device or interface, the alias is displayed in the message for the device or interface.
- The level of detail that is included in a message depends on the facility and severity levels that are configured. Messages include the highest level of detail available for the configured facility and severity levels.
- Time resolution is supported in seconds, and data in milliseconds is not available. If you attempt to configure milliseconds support, the log output displays the data as 000.
Unsupported syslog features include:
- File access to syslog messages
- Syslog output in the structured data format
- Monitoring of syslog messages
