Cisco Cisco Unified IP Interactive Voice Response (IVR) 8.0(1) Troubleshooting Guide

The way in which you view alarm messages depends on the destination to which messages were sent. 
Each alarm message that you view will include an alarm name. To find information about the alarm name 
that appears in an alarm message, see 

.

To view alarm messages that were sent to a CiscoWorks Resource Management Essentials (RME) 
Syslog server, refer to the CiscoWorks documentation, available at this URL: 

To view alarm messages that were sent to a third-party Syslog server, refer to the documentation for that 
system.

 describes the fields found in Syslog messages.

:

<pri>

<128>

This field is added so that syslog can read the 
severity level. Syslogd looks for this pri value 
which is set to LOCAL0|SEVERITY by default.

n:

100:

This field mimics the Solaris syslogd, which 
prefixes the syslog message with an internal 
counter szi. It has no significance to the SAC. The 
number is parsed out by the SAC.

MMM DD

Aug 09

Abbreviated month day as known at the source.

hh:mm:ss.mmm 

19:20:10.209 

Time at source device. The UTC time is used to 
avoid any time zone name discrepancy.

Time Zone

UTC

Abbreviated time zone defined in the device, such 
as GMT. This field is always set to UTC to avoid 
any time zone name discrepancy. 

% FACILITY Allowed 
characters A-Z 0-9 _ 

CDP, Memory 
optimization in RISC 
(ALIGN)

A code consisting of two or more uppercase letters 
that indicate the facility to which the message 
refers. A facility can be a hardware device, a 
protocol, or a module of the system software. Note 
that this is not the same as the UNIX Syslog server 
logging facility.

[SUBFACILITY-] A-Z 
0-9 _

CLAW (Common Link 
Access for 
Workstations)

Subfacility Code. This field is optional. 

SEVERITY

 0 

A single-digit code from 0 to 7 that reflects the 
severity of the condition. The lower the number, 
the more serious the situation. Severity also maps 
to logging level.