Cisco Cisco Expressway Maintenance Manual
Notes:
n
Events are always logged locally (to the Event Log) regardless of whether or not remote logging is enabled.
n
Logging at level 3 or level 4 is not recommended for normal operation, because such detailed logging may
cause the 2GB log to rotate too quickly. You may need to record this level of detail while troubleshooting.
cause the 2GB log to rotate too quickly. You may need to record this level of detail while troubleshooting.
n
Changes to the log level affect both the Event Log that you can view via the web interface, and the
information that is copied to any remote log server.
information that is copied to any remote log server.
n
Changes to the log level are not retrospective — they only affect what is logged after you change the level.
n
The Expressway uses the following facilities for local logging. The software components / logs that map to
the (local) facilities are emphasised:
the (local) facilities are emphasised:
l
0 (kern)
l
3 (daemon)
l
16 (local0) Administrator
l
17 (local1) Config
l
18 (local2) Mediastats
l
19 (local3) Apache error
l
20 (local4) etc/opt/apache2
l
21 (local5) Developer
l
22 (local6) Network
Logging media statistics
When you switch Media statistics to On, the Expressway starts logging media statistics to the local hard
disk, in /mnt/harddisk/log. Up to 200 files of 10MB each are stored, with the oldest being deleted when the
200
disk, in /mnt/harddisk/log. Up to 200 files of 10MB each are stored, with the oldest being deleted when the
200
th
is full.
Media statistics messages are also published as syslog messages. While the Media statistics logging option
is on, the Expressway publishes statistics using facility 18 (local2) to all remote syslog servers you have
configured.
is on, the Expressway publishes statistics using facility 18 (local2) to all remote syslog servers you have
configured.
Some examples of the media statistics are packets forwarded, packets lost, jitter, media type, codec, and
actual bitrate.
actual bitrate.
Note: The message severity is Informational but media statistics messages are always published,
irrespective of the severity filters.
irrespective of the severity filters.
Publishing logs to remote syslog servers
Syslog is a convenient way to aggregate log messages from multiple systems to a single location. This is
particularly recommended for peers in a cluster.
particularly recommended for peers in a cluster.
n
You can configure the Expressway to publish log messages to up to 4 remote syslog servers.
n
The syslog servers must support one of the following standard protocols:
l
l
Configuring remote syslog servers
1. Go to
Maintenance > Logging
, and enter the IP addresses or Fully Qualified Domain Names (FQDNs) of
the Remote syslog servers to which this system will send log messages.
Cisco Expressway Administrator Guide (X8.5.1)
Page 217 of 399
Maintenance
Configuring logging