Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Interpreting Event Messages

date_range 07-Sep-21

The following output shows a sample event message.

content_copy zoom_out_map
Feb 27 02:33:04 bm-a mgd[6520]: UI_LOGIN_EVENT: User 'security-officer' login, class 'j-super-user' [6520],
ssh-connection '', client-mode 'cli'
Feb 27 02:33:49 bm-a mgd[6520]: UI_DBASE_LOGIN_EVENT: User 'security-officer' entering configuration
mode
Feb 27 02:38:29 bm-a mgd[6520]: UI_CMDLINE_READ_LINE: User 'security-officer', command 'run show log
Audit_log | grep LOGIN 

Table 1 describes the fields for an event message. If the system logging utility cannot determine the value in a particular field, a hyphen ( - ) appears instead.

Table 1: Fields in Event Messages
Field Description Examples

timestamp

Time when the message was generated, in one of two representations:

  • MMM-DD HH:MM:SS.MS+/-HH:MM, is the month, day, hour, minute, second and millisecond in local time. The hour and minute that follows the plus sign (+) or minus sign (-) is the offset of the local time zone from Coordinated Universal Time (UTC).

  • YYYY-MM-DDTHH:MM:SS.MSZ is the year, month, day, hour, minute, second and millisecond in UTC.

Feb 27 02:33:04 is the
timestamp expressed as
local time in the United
States.
2012-02-27T09:17:15.719Z is
2:33 AM UTC on 27 Feb
2012. 

hostname

Name of the host that originally generated the message.

router1

process

Name of the Junos OS process that generated the message.

mgd

processID

UNIX process ID (PID) of the Junos OS process that generated the message.

4153

TAG

Junos OS system log message tag, which uniquely identifies the message.

UI_DBASE_LOGOUT_EVENT

username

Username of the user initiating the event.

“admin”

message-text

English-language description of the event .

set: [system radius-server 1.2.3.4 secret]
footer-navigation