27 · Introducing System Monitoring系統監控簡介

Introducing SyslogSyslog 簡介

Syslog is a protocol that allows a device to send event notification messages across IP networks to event message collectors. By default, a network device sends the output from system messages and debug-privileged EXEC commands to a logging process. The logging process controls the distribution of logging messages to various destinations, such as the logging buffer, console line, terminal lines, or a syslog server, depending on your configuration. Logging services enable you to gather logging information for monitoring and troubleshooting, to select the type of logging information that is captured, and to specify the destinations of captured syslog messages.

Syslog 是一種協定,可讓裝置透過 IP 網路將事件通知訊息傳送給事件訊息收集器。依預設,網路裝置會將系統訊息與 debug 特權 EXEC 命令的輸出傳送至記錄程序(logging process)。此記錄程序控制記錄訊息傳送到各個目的地的方式,例如記錄緩衝區、主控台線路、終端機線路或 syslog 伺服器,視您的組態而定。記錄服務讓您能蒐集記錄資訊以進行監控與疑難排解、選擇要擷取的記錄資訊類型,並指定所擷取 syslog 訊息的目的地。

You can set the severity level of the messages to control the type of messages that the consoles display and where the messages are displayed. You can configure the device to add time stamps to log messages, and to set the syslog source address, to enhance real-time debugging and management.

您可以設定訊息的嚴重性等級,以控制主控台顯示的訊息類型與顯示位置。您可以將裝置設定為在記錄訊息中加入時間戳記,並設定 syslog 來源位址,以強化即時偵錯與管理。

You can access logged system messages by using the device CLI or by saving them to a syslog server. The switch or router software saves syslog messages in an internal buffer.

您可以透過裝置 CLI 存取已記錄的系統訊息,或將其儲存至 syslog 伺服器。交換器或路由器軟體會將 syslog 訊息儲存於內部緩衝區中。

You can remotely monitor system messages by viewing the logs on a syslog server or by accessing the device through Telnet, Secure Shell (SSH), or through the console port.

您可以透過檢視 syslog 伺服器上的記錄,或透過 Telnet、Secure Shell(SSH)或主控台埠存取裝置,來遠端監控系統訊息。

Administrators usually see syslog messages on the router console. Here are common syslog messages that you may have seen:

管理員通常會在路由器主控台上看到 syslog 訊息。以下是您可能見過的常見 syslog 訊息:

%SYS-5-CONFIG_I: Configured from console by console
%LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to down
Regarding syslog, which two statements are true? (Choose two.)關於 syslog,下列哪兩項敘述正確?(選擇兩項。)