| aaa | Enables and configures logging of the following authentication, authorization, and accounting related events:- radius-discon-msg – RADIUS disconnection message
- radius-session-expired – RADIUS session expired message
- radius-session-not-started – RADIUS session not started message
- radius-vlan-update – RADIUS VLAN update message
|
| adapt | Enables and configures logging of the following adaptivity module related events: - adaptivity-change – Event adaptivity change
- adaptivity-rehome – Event adaptivity rehome
|
| adopt-services | Enables and configures the logging of adopted services related events |
| adv-wips | Enables and configures the logging of advanced WIPS related events |
| ap | Enables and configures logging of the following AP related events:- adopted – Event AP adopted
- adopted-to-controller – Event AP adopted to wireless controller
- ap-adopted – Event access port adopted
- ap-autoup-done – Event AP autoup done
- ap-autoup-fail – Event AP autoup fail
- ap-autoup-needed – Event AP autoup needed
- ap-autoup-no-need – Event AP autoup not needed
- ap-autoup-reboot – Event AP autoup reboot
- ap-autoup-timeout – Event AP autoup timeout
- ap-autoup-ver – Event AP autoup version
- ap-reset-detected – Event access port reset detected
- ap-reset-request – Event access port user requested reset
- ap-timeout – Event access port timed out
- ap-unadopted – Event access port unadopted
- image-parse-failure – Event image parse failure
- legacy-auto-update – Event legacy auto update
- no-image-file – Event no image file
- offline – Event AP detected as offline
- online – Event offline AP detected as online
- reset – Event reset
- sw-conn-lost – Event software connection lost
- unadopted – Event unadopted
|
| bt | Enables and configures logging of the following bluetooth related events: - bt-started – Event bluetooth (bt) started
- bt-state-change – Event bt state change
|
| captive-portal | Enables and configures logging of the following captive portal (hotspot) related events:- allow-access – Event client allowed access
- auth-failed – Event client authentication failed
- auth-success – Event client authentication success
- client-disconnect – Event client disconnected
- client-removed – Event client removed
- data-limit-exceed – Event client data limit exceeded
- flex-log-access – Event flexible log access granted to client
- inactivity-timeout – Event client time-out due to inactivity
- page-cre-failed – Event page creation failure
- purge-client – Event client purged
- session-timeout – Event session timeout
- vlan-switch – Event client switched VLAN
|
| cdp | Enables and configures logging of the following CISCO Discovery Protocol (CDP) related event: - duplex-mismatch – Event duplex mismatch detected between CDP neighbors
|
| certmgr | Enables and configures logging of the following certificate manager related events:- ca-cert-actions-failure – Event CA certificate actions failure
- ca-cert-actions-success – Event CA certificate actions success
- ca-key-actions-failure – Event CA key actions failure
- ca-key-actions-success – Event CA key actions success
- cert-expiry – Event certificate expiry
- crl-actions-failure – Event Certificate Revocation List (CRL ) actions failure
- crl-actions-success – Event CRL actions success
- csr-export-failure – Event CSR export failure
- csr-export-success – Event CSR export success
- delete-trustpoint-action – Event delete trustpoint action
- export-trustpoint – Event trustpoint exported
- import-trustpoint – Event trustpoint imported
- rsa-key-actions-failure – Event RSA key actions failure
- rsa-key-actions-success – Event RSA key actions success
- svr-cert-actions-success – Event server certificate actions success
- svr-cert-actions-failure – Event server certificate actions failure
|
| certmgr-lite | Enables and configures logging of certificate manager (lite version) related event messages |
| cfgd | Enables and configures logging of the following configuration daemon module related events:- acl-attached-altered – Event Access List (ACL) attached altered
- acl-rule-altered – Event ACL rule altered
|
| cluster | Enables and configures logging of the following cluster module related events:- cmaster-cfg-update-fail – Event cluster master config update failed
- max-exceeded – Event maximum cluster count exceeded
- state-change – Event cluster state change (active/inactive)
- state-change-active – Event cluster state change to active
- state-change-inactive – Event cluster state change to inactive
- state-retain-active – Event cluster state retained as active
|
| crm | Enables and configures logging of the following Critical Resource Monitoring (CRM) related event - critical-resource-down – Event critical resource goes down
- critical-resource-up – Event critical resource comes up
|
| device | Enables and configures the logging of device module related events |
| database | Enables and configures logging of the following error conditions in the captive-portal/NSIght database:- database-election-fail – Event primary database node selection failure. Requires manual intervention to select primary database node.
- database-exception – Event database may need to be dropped and device restarted
- database-low-disk-space – Event database low disk space
- database-new-state – Event database state change
- database-op-failure – Event database failure
- database-set-name-mismatch – Event replica-set not enabled on host
- database-storage-mismatch – Event database mismatch. All database files must be removed.
- operation-complete – Event database operation completed successfully
- operation-failed – Event database operation failure
|
| dhcpsvr | Enables and configures logging of the following DHCP server related events:- dhcp-start – Event DHCP server started
- dhcpsvr-stop – Event DHCP sever stopped
- relay-iface-no-ip – Event no IP address on DHCP relay interface
- relay-no-iface – Event no interface for DHCP relay
- relay-start – Event relay agent started
- relay-stop – Event DHCP relay agent stopped
|
| diag | Enables and configures logging of the following diagnostics module related events:- autogen-tech-sprt – Event autogen technical support
- buf-usage – Event buffer usage
- cpu-load – Event CPU load
- cpu-usage-too-high – Event CPU usage high
- cpu-usage-too-high-recovery – Event recovery from high CPU usage
- disk-usage – Event disk usage
- elapsed-time – Event elapsed time
- fan-underspeed – Event fan underspeed
- fd-count – Event forward count
- free-flash-disk – Event free flash disk
- free-flash-inodes – Event free flash inodes
- free-nvram-disk – Event free nvram disk
- free-nvram-inodes – Event free nvram inodes
- free-ram – Event free ram
- free-ram-disk – Event free ram disk
- free-ram-inodes – Event free ram inodes
- head-cache-usage – Event head cache usage
- high-temp – Event high temp
- ip-dest-usage – Event ip destination usage
- led-identify – Event led identify
- low-temp – Event low temp
- mem-usage-too-high – Event memory usage high
- mem-usage-too-high-recovery – Event recovery from high memory usage
- new-led-state – Event new led state
- over-temp – Event over temp
- over-voltage – Event over voltage
- poe-init-fail – Event PoE init fail
- poe-power-level – Event PoE power level
- poe-read-fail – Event PoE read fail
- poe-state-change – Event PoE state change
- poe-state-change – Event PoE state change
- pwrsply-fail – Event failure of power supply
- raid-degraded – Event Redundant Array of Independent Disks (RAID) degraded
- raid-error – Event RAID error
- ram-usage – Event ram usage
- under-voltage – Event under voltage
- wd-reset-sys – Event wd reset system
- wd-state-change – Event wd state change
|
| dot11 | Enables and configures logging of the following 802.11 management module related events:- client-assoc-ignored – Wireless client association ignored event
- client-associated – Wireless client associated event
- client-denied-assoc – Event client denied association
- client-disassociated – Wireless client disassociated
- country-code – Event country code applied
- country-code-error – Event country code error
- eap-cached-keys – Event Extensible Authentication Protocol (EAP) cached keys
- eap-client-timeout – Event EAP client timeout
- eap-failed – Event EAP failed
- eap-opp-cached-keys – Event EAP opp cached keys
- eap-preauth-client-timeout – Event EAP pre authentication client timeout
- eap-preauth-failed – Event EAP pre authentication failed
- eap-preauth-server-timeout – Event EAP pre authentication server timeout
- eap-preauth-success – Event EAP pre authentication success
- eap-server-timeout – Event EAP server timeout
- eap-success – Event EAP success
- ft-roam-success – Event client fast BSS transition
- gal-rx-request – Event GAL request received event
- gal-tx-response – Event response sent to GAL request
- gal-validate-failed – Event GAL validation failed
- gal-validate-req – Event GAL validation request
- gal-validate-success – Event GAL validation success
- kerberos-client-success – Event client Kerberos authentication success
- kerberos-wlan-failed – Event WLAN Kerberos authentication failed
- kerberos-wlan-success – Event WLAN Kerberos authentication success
- kerberos-wlan-timeout – Event Kerberos authentication timed out
- move-operation-success – Event move operation success
- tkip-cntrmeas-end – Event TKIP countermeasures ended
- tkip-cntrmeas-start – Event TKIP countermeasures initiated
- tkip-mic-fail-report – Event TKIP MIC failure report
- tkip-mic-failure – Event TKIP MIC check failed
- neighbor-denied-assoc – Event neighbor denied association
- unsanctioned-ap-active – Event unsanctioned AP active
- unsanctioned-ap-inactive – Event unsanctioned AP inactive
- unsanctioned-ap-status-change – Event unsanctioned AP status change
- voice-call-completed – Event voice call completed
- voice-call-established – Event voice call established
- voice-call-failed – Event voice call failed
- wlan-time-access-disable – Event WLAN disabled by time-based-access
- wlan-time-access-enable – Event WLAN re-enabled by time-based-access
- wpa-wpa2-failed – Event WPA-WPA2 failed
- wpa-wpa2-key-rotn – Event WPA-WPA2 key rotn
- wpa-wpa2-success – Event WPA-WPA2 success
|
| dot1x | Enables and configures logging of the following 802.1X authentication related events:- dot1x-failed – Event EAP authentication failure
- dot1x-success – Event dot1x-success
|
| fa | Enables and configures logging of fabric attach related events:- fa-accepted – Event fa-accepted
- fa-pending – Event fa-pending
|
| fwu | Enables and configures logging of the following firmware update (FWU) related events:- fwuaborted – Event fwu aborted
- fwubadconfig – Event fwu aborted due to bad config
- fwucorruptedfile – Event fwu aborted due to corrupted file
- fwucouldntgetfile – Event fwu aborted because the system could not get file
- fwudone – Event fwu done
- fwufileundef – Event fwu aborted due to file undefined
- fwunoneed – Event fwu no need
- fwuprodmismatch – Event fwu aborted due to product mismatch
- fwuserverundef – Event fwu aborted due to server undefined
- fwuserverunreachable – Event fwu aborted due to server unreachable
- fwusignmismatch – Event fwu aborted due to signature mismatch
- fwusyserr – Event fwu aborted due to system error
- fwuunsupportedhw – Event fwu aborted due to unsupported hardware
- fwuunsupportedmodelnum – Event fwu aborted due to unsupported FIPS model number
- fwuvermismatch – Event fwu aborted due to version mismatch
|
| isdn | Configures file Integrated Service Digital Network (ISDN) module related event s- isdn-alert – Event ISDN alert
- isdn-crit – Event ISDN critical
- isdn-debug – Event ISDN debug
- isdn-emerg – Event ISDN emergency
- isdn-err – Event ISDN error
- isdn-info – Event ISDN info
- isdn-notice – Event ISDN notice
- isdn-warning – Event ISDN warning
|
| l2gre | Enables and configures logging of the following Layer 2 GRE (L2GRE) tunnel related events:- l2gre-tunnel-down – Event L2GRE tunnel down
- l2gre-tunnel-failover – Event L2GRE tunnel failover
- l2gre-tunnel-up – Event L2GRE tunnel up
|
| l2tpv3 | Enables and configures logging of the following Layer 2 TPV3 (L2TPv3) tunnel related events:- l2tpv3-tunnel-down – Event L2TPv3 tunnel down
- l2tpv3-tunnel-up – Event L2TPv3 tunnel up
|
| licmgr | Enables and configures logging of the following license manager module related events:- lic-installed-count – Event total number of license installed count
- lic-installed-default – Event default license installation
- lic-installed – Event license installed
- lic-invalid – Event license installation failed
- lic-removed – Event license removed
|
| lldp | Enables and configures logging of the following Link Layer Discovery Protocol (LLDP) related events:- lldp-loop-detected – Event layer 2 switching loop
- lldp-loop-recovery – Event recovery from layer 2 switching loop
|
| mgmt | Enables and configures logging of the following management services module related events:- log-http-init – Event Web server started
- log-http-local-start – Event Web server started in local mode
- log-http-start – Event Web server started in external mode
- log-https-start – Event secure Web server started
- log-https-wait – Event waiting for Web server to start
- log-key-deleted – Event RSA key associated with SSH is deleted
- log-key-restored – Event RSA key associated with SSH is added
- log-trustpoint-deleted – Event trustpoint associated with HTTPS is deleted
|
| mesh | Enables and configures logging of the following mesh module related events:- mesh-link-down – Event mesh link down
- mesh-link-up – Event mesh link up
- meshpoint-down – Event meshpoint down
- meshpoint-loop-prevent-off – Event meshpoint loop prevent off
- meshpoint-loop-prevent-on – Event meshpoint loop prevent on
- meshpoint-path-change – Event meshpoint-path-change
- meshpoint-root-change – Event meshpoint-root-change
- meshpoint-up – Event meshpoint up
|
| nsm | Configures Network Service Module (NSM) related event - dhcpc-err – Event DHCP certification error
- dhcpdefrt – Event DHCP defrt
- dhcpip – Event DHCP IP
- dhcpipchg – Event DHCP IP change
- dhcpipnoadd – Event DHCP IP overlaps static IP address
- dhcplsexp – Event DHCP lease expiry
- dhcpnak – Event DHCP server returned DHCP NAK response
- dhcpnodefrt – Event interface no default route
- if-failback – Event interface failback
- if-failover – Event interface failover
- ifdown – Event interface down
- ifipcfg – Event interface IP config
- ifup – Event interface up
- nsm-ntp – Event translate host name
|
| pm | Configures process monitor module related event s- procid – Event proc ID generated
- procmaxrstrt – Event proc max restart
- procnoresp – Event proc no response
- procrstrt – Event proc restart
- procstart – Event proc start
- procstop – Event proc stop
- procsysrstrt – Event proc system restart
- startupcomplete – Event startup complete
|
| radconf | Enables and configures logging of the following RADIUS configuration daemon related events:- could-not-stop-radius – Event could not stop RADIUS server
- radiusdstart – Event RADIUS server started
- radiusdstop – Event RADIUS server stopped
|
| radio | Enables and configures logging of the following radio module related events:- acs-scan-complete – Event ACS scan completed
- acs-scan-started – Event ACS scan started
- cb-associated – Event client-bridge access point associates with an infrastructure access point
- cb-roam – Event client-bridge access point roams from one infrastructure access point to another infrastructure access point
- cb-wired-client-added – Event wired client is added to the client-bridge
- cb-wired-client-removed – Event wired client is removed from the client-bridge
- channel-country-mismatch – Event channel and country of operation mismatch
- radar-det-info – Detected radar info
- radar-detected – Event radar detected
- radar-scan-completed – Event radar scan completed
- radar-scan-started – Event radar scan started
- radio-antenna-error – Event invalid antenna type on this radio
- radio-antenna-setting – Event antenna type setting on this radio
- radio-state-change – Event radio state change
- resume-home-channel – Event resume home channel
|
| rasst | Enables and configures the logging of roaming assist module related events |
| smrt | Enables and configures logging of the following SMART RF module related events:- calibration-done – Event calibration done
- calibration-started – Event calibration started
- channel-change – Event channel change
- config-cleared – Configuration cleared event
- cov-hole-recovery – Event coverage hole recovery
- cov-hole-recovery-done – Event coverage hole recovery done
- interference-recovery – Event interference recovery
- neighbor-recovery – Event neighbor recovery
- power-adjustment – Event power adjustment
- root-recovery – Event meshpoint root recovery
|
| smtpnot | Enables and configures logging of the following SMTP module related events:- cfg – Event cfg
- cfginc – Event cfg inc
- net – Event net
- proto – Event proto
- smtpauth – Event SMTP authentication
- smtperr – Event SMTP error
- smtpinfo – Event SMTP information
|
| system | Enables and configures logging of the following system module related events:- clock-reset – Event clock reset
- cold-start – Event cold start
- config-commit – Event configuration commit
- config-revision – Event config-revision done
- devup-rfd-fail – Event device-upgrade failed on rf-domain manager managed devices
- guest-user-exp – Event guest user purging
- http-err – Event Web server did not start
- login – Event successful login
- login-fail – Event login fail. Occurs when user authentication fails.
- login-fail-access – Event login fail access. Occurs in case of access violation.
- login-fail-bad-role – Event login fail bad role. Occurs when user uses an invalid role to logon.
- login-lockout – Event user account locked out message. Occurs when a user account is locked due to exceeding of maximum number failed login attempts threshold. Configure this event notification only if the max-fail and lockout-time parameters have been configured in the management-policy context. For more information, see password-entry.
- login-unlocked – Event user account un-locked. Occurs when a locked user account is re-activated. Enable this event notification only if the max-fail and lockout-time parameters have been configured in the management-policy context. For more information, see password-entry.
- logout – Event logout
- maat-light – Event action on RIM (Research in Motion) radio(s) from the Maat light module
- panic – Event panic
- periodic-heart-beat – Event periodic heart beat
- procstop – Event proc stop
- server-unreachable – Event server-unreachable
- system-autoup-disable – Event system autoup disable
- system-autoup-enable – Event system autoup enable
- t5-config-error – Event t5-config-error
- ui-user-auth-fail – Event user authentication fail
- ui-user-auth-success – Event user authentication success
- warm-start – Event warm start
- warm-start-recover – Event recovery from warm start
|
| test | Enables and configures logging of the following test module related events:- testalert – Event test alert
- testargs – Event test arguments
- testcrit – Event test critical
- testdebug – Event test debug
- testemerg – Event test emergency
- testerr – Event test error
- testinfo – Event test information
- testnotice – Event test notice
- testwarn – Event test warning
|
| vrrp | Enables and configures logging of the following Virtual Router Redundancy Protocol (VRRP) related events: - vrrp-monitor-change – Event VRRP monitor link state change
- vrrp-state-change – Event VRRP state transition
- vrrp-vip-subnet-mismatch – Event VRRP IP not overlapping with an interface addresses
|
| webf | Enables and configures logging of the following Web Filtering (webf) module related events:- malform-url-request – Event malformed URL request
- no-parent-engine – Event ‘no session to URL classification server‘
- srvr-connect-fail – Event URL classification server unreachable
- url-blocked – Event URL blocked
- webf-lic-acquired – Event webf license acquired
- webf-lic-missing – Event webf license missing
- webf-lic-revoked – Event webf license revoked
|
| wips | Enables and configures logging of the following Wireless IPS module related events:- air-termination-active – Event air termination active
air-termination-ended – Event air termination ended
air-termination-inactive – Event air termination inactive
air-termination-initiated – Event air termination initiated
rogue-ap-active – Event rogue AP active
rogue-ap-inactive – Event rogue AP inactive
unsanctioned-ap-active – Event unsanctioned AP active
unsanctioned-ap-inactive – Event unsanctioned AP inactive
unsanctioned-ap-status-change – Event unsanctioned AP changed state
wips-client-blacklisted – Event WIPS client blacklisted
- wips-client-rem-blacklist – Event WIPS client rem blacklist
- wips-event – Event WIPS event triggered
Note: Air-termination is not supported on AP505 and AP510 model access points.
|
| email | Sends e-mail notifications to a pre configured e-mail ID |
| forward-to-switch | Forwards the messages to an external server |
| snmp | Logs an SNMP event |
| syslog | Logs an event to syslog |
| default | Performs the default action for the event |
| off | Switches the event off, when the event happens, and no action is performed |
| on | Switches the event on, when the event happens, and the configured action is taken |