System Logging Configuration

Syslog event reporting uses the syslog protocol to relay event messages to a centralized event server on the enterprise network. In the protocol, a device generates messages, a relay receives and forwards the messages, and a syslog server receives the messages.

System Log Level

Determines the error severity that is logged for the appliance and AP. Select the least severe log level that you want to receive: Information, Minor, Major, Critical. For example, if you select Minor, you receive all Minor, Major and Critical messages. If you select Major you receive all Major and Critical messages. The default is Minor.

Enable Report Station Events to collect and display station session events on the ExtremeCloud IQ Controller station events log.

Enable Forward Station Events as Traps to notify the administrator of events without solicitation. An SNMP trap is an event notification sent by the managed agent (a network device) to the management system to identify the occurrence of conditions. Traps can save network resources by reducing SNMP polling.

Syslog

Provide the IP Address of 1-3 syslog servers and enable the type of messages that you want to send to the syslog servers.

• Send all Service Messages
• Send Audit Messages
• Send Station Events

Note

To synchronize the logs, the syslog daemon must be running on both the appliance and on the remote syslog server. When you change the log level on the appliance, you must modify the appropriate setting in the syslog configuration on remote syslog server.

Facility Codes

Facilities codes identify log streams in the remote syslog server. Select a unique facility code (local.0 - local.6) for each ExtremeCloud IQ Controller facility to differentiate the log streams and facilitate the filtering of messages.

The facility code applies to all three servers. Select a facility code for each of the following:

• Application Facility
• Service Facility
• Audit Facility
• Station Facility