Cisco Cisco Expressway Maintenance Manual
Field
Description
process_name
The name of the program generating the log message. This could include:
■
tvcs for all messages originating from Expressway processes
■
web for all web login and configuration events
■
licensemanager for messages originating from the call license manager
■
b2bua for B2BUA events
■
portforwarding for internal communications between the Expressway-C and the
Expressway-E
Expressway-E
■
ssh for ssh tunnels between the Expressway-C and the Expressway-E
but will differ for messages from other applications running on the Expressway.
section for further information).
Administrator Events
Administrator session related events are:
■
Admin Session Start
■
Admin Session Finish
■
Admin Session Login Failure
field includes:
■
the name of the administrator user to whom the session relates, and their IP address
■
the date and time that the login was attempted, started, or ended
Message Details Field
For all messages logged from the
tvcs
process, the
message_details
field, which contains the body of the message,
consists of a number of human-readable
name=value
pairs, separated by a space.
The first name element within the
message_details
field is always
Event
and the last name element is always
Level
.
The table below shows all the possible name elements within the
message_details
field, in the order that they would
normally appear, along with a description of each.
Note: in addition to the events described below, a
syslog.info
event containing the string
MARK
is logged after each
hour of inactivity to provide confirmation that logging is still active.
Name
Description
Event
that are logged by the Expressway, and the level at which they are logged.
User
The username that was entered when a login attempt was made.
ipaddr
The source IP address of the user who has logged in.
247
Cisco Expressway Administrator Guide
Reference Material