Syslog Explained | Cisco CCNA 200-301

Join the Discord Server!
discord.com/invite/QZ2B9GA3BH
---------------------
MY FULL CCNA COURSE
📹 CCNA - certbros.teachable.com/p/cisco-ccna?utm_source=you…

FREE CCNA FLASHCARDS
🃏 CCNA Flashcards - certbros.com/ccna/flashcards

HOW TO PASS THE CCNA
📚 Get a great book - amzn.to/3f16QA5
📹 Take a video course - certbros.teachable.com/p/cisco-ccna?utm_source=you…
✔ Use practice exams - www.certbros.com/ccna/Exsim

SOCIAL
🐦 Twitter - twitter.com/certbros
📸 Instagram - www.instagram.com/certbros
👔 LinkedIn - www.linkedin.com/company/certbros
💬 Discord - www.certbros.com/discord

Disclaimer: These are affiliate links. If you purchase using these links, I'll receive a small commission at no extra charge to you.
---------------------------------------------------------------------------------------------------------------

Using a SYSLOG server allows us to centrally manage our log information. Why would you want to do that? Well, there are a few reasons why.

First, Syslog information is very important when troubleshooting problems. Let's say a user reports a network outage. You can go through all of the logs to see if there were any problems at the time the user reported the issue.

Another benefit of storing syslog information in a central place is data retention. Cisco devises, by default, stores log information in RAM. This means, when the device reboots, the logs are erased. Keeping all of your log information in one place allows for easy archiving.

OK, so now we know what a syslog server is and why we use them, let's look at some log messages! It may not seem like it straight away, but these messages follow an industry standard. This makes it easy to correlate logs from different vendors.

The first part is the timestamp or sequence number. You can choose which one you want to use.

The next part is called the facility. This shows the source of the message.

Next, we have the severity. This shows how urgent the log message is.

Then we have something call the mnemonic, this is a code to identify the message.

And finally, we have the description, which contains the log message.

Syslog has 8 severity levels ranging from 0-7. The top is the most urgent, severity 0, and the bottom is the least urgent, which is 7 for debug messages. This is important because you likely don’t want to send all syslog messages to your server.

0 Emergency
1 Alert
2 Critical
3 Error
4 Warning
5 Notice
6 Informational
7 Debug

Unfortunately, this is one of those tables you're going to have to memorise for the CCNA exam. You need to know, not only the severity levels but which order they’re in. As with most of these things, mnemonics come to the rescue.

Every Awesome Cisco Engineer Will Need Ice-cream Daily
Ernie Always Cries Even when No one is Dying

#ccna #cisco #networking