Skip to main content

Logging Feature

Configure logging to disk and/or to a remote logging server.

Diagram

Classes

system_profiles (sdwan.feature_profiles)

NameTypeConstraintMandatoryDefault Value
loggingClass[logging]No

logging (sdwan.feature_profiles.system_profiles)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[^&<>! "]{1,128}$No
descriptionStringNo
disk_file_sizeIntegermin: 1, max: 20No
disk_file_size_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
disk_file_rotateIntegermin: 1, max: 10No
disk_file_rotate_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
ipv4_serversList[ipv4_servers]No
ipv6_serversList[ipv6_servers]No
tls_profilesList[tls_profiles]No

ipv4_servers (sdwan.feature_profiles.system_profiles.logging)

NameTypeConstraintMandatoryDefault Value
hostname_ipIPNo
hostname_ip_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
severityChoiceinformational, debugging, notice, warn, error, critical, alert, emergencyNo
severity_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
source_interfaceStringRegex: ^(GigabitEthernet|Loopback|TenGigabitEthernet|TwoGigabitEthernet|FortyGigabitEthernet|HundredGigE|Vlan)(([1-9]\d|\d)/){0,2}(0|[1-9]\d*)([:|\.][1-9]\d*)?No
source_interface_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tls_enableBooleantrue, falseNo
tls_enable_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tls_properties_custom_profileBooleantrue, falseNo
tls_properties_custom_profile_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tls_properties_profileStringmin: 1No
tls_properties_profile_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
vpn_idIntegermin: 0, max: 65530No
vpn_id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

ipv6_servers (sdwan.feature_profiles.system_profiles.logging)

NameTypeConstraintMandatoryDefault Value
hostname_ipIPNo
hostname_ip_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
severityChoiceinformational, debugging, notice, warn, error, critical, alert, emergencyNo
severity_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
source_interfaceStringRegex: ^(GigabitEthernet|Loopback|TenGigabitEthernet|TwoGigabitEthernet|FortyGigabitEthernet|HundredGigE|Vlan)(([1-9]\d|\d)/){0,2}(0|[1-9]\d*)([:|\.][1-9]\d*)?No
source_interface_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tls_enableBooleantrue, falseNo
tls_enable_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tls_properties_custom_profileBooleantrue, falseNo
tls_properties_custom_profile_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tls_properties_profileStringmin: 1No
tls_properties_profile_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
vpn_idIntegermin: 0, max: 65530No
vpn_id_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

tls_profiles (sdwan.feature_profiles.system_profiles.logging)

NameTypeConstraintMandatoryDefault Value
cipher_suitesListChoice[aes-128-cbc-sha, aes-256-cbc-sha, dhe-aes-cbc-sha2, dhe-aes-gcm-sha2, ecdhe-ecdsa-aes-gcm-sha2, ecdhe-rsa-aes-cbc-sha2, ecdhe-rsa-aes-gcm-sha2, rsa-aes-cbc-sha2, rsa-aes-gcm-sha2]No
cipher_suites_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
nameStringmin: 1No
name_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No
tls_versionChoiceTLSv1.1, TLSv1.2No
tls_version_variableStringRegex: ^[./\[\]a-zA-Z0-9_-]{1,64}$No

Examples

sdwan:
feature_profiles:
system_profiles:
- name: system1
description: this is test system profile
logging:
name: logging
description: "Base Logging template; no TLS"
ipv4_servers:
- hostname_ip: 172.16.0.11
severity: warn
source_interface_variable: logging_server_source_interface
vpn_id_variable: logging_vpn_id
- hostname_ip: 172.16.0.12
severity: warn
source_interface: Loopback0
vpn_id: 511