Skip to content

Syslog

Location in GUI: Admin » External Data Collectors » Monitoring Destinations » Syslog

Diagram
NameTypeConstraintMandatoryDefault Value
syslogsList[syslogs]No

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$Yes
descriptionStringRegex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$No
auditBooleantrue, falseNotrue
eventsBooleantrue, falseNotrue
faultsBooleantrue, falseNotrue
sessionBooleantrue, falseNofalse
minimum_severityChoiceemergencies, alerts, critical, errors, warnings, notifications, information, debuggingNowarnings
admin_stateBooleantrue, falseNotrue
formatChoiceaci, nxos, enhanced-logNoaci
show_millisecondBooleantrue, falseNofalse
show_timezoneBooleantrue, falseNofalse
local_admin_stateBooleantrue, falseNotrue
local_severityChoiceemergencies, alerts, critical, errors, warnings, notifications, information, debuggingNoinformation
console_admin_stateBooleantrue, falseNotrue
console_severityChoiceemergencies, alerts, critical, errors, warnings, notifications, information, debuggingNoalerts
destinationsList[destinations]No

destinations (apic.fabric_policies.monitoring.syslogs)

Section titled “destinations (apic.fabric_policies.monitoring.syslogs)”
NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[a-zA-Z0-9_.:-]{1,64}$No
hostname_ipAnyString[Regex: ^[a-zA-Z0-9:][a-zA-Z0-9.:-]{0,254}$] or IPYes
protocolChoiceudp, tcp, sslNo
portIntegermin: 1, max: 65535No514
admin_stateBooleantrue, falseNotrue
facilityChoicelocal0, local1, local2, local3, local4, local5, local6, local7Nolocal7
severityChoiceemergencies, alerts, critical, errors, warnings, notifications, information, debuggingNowarnings
mgmt_epgChoiceinb, oobNoinb

Example-1: This data model creates a syslog policy named syslog_policy_simple. The policy has a single syslog destination server defined using an IP address over udp/514 (udp is default). The log messages that have a severity level of warning or higher for facility local7 will be sent to syslog server using the oob management EPG.

apic:
fabric_policies:
monitoring:
syslogs:
- name: syslog_policy_simple
description: Simple Syslog Example
destinations:
- hostname_ip: 10.0.0.100
name: syslog_server_1
port: 514
facility: local7
severity: warnings
mgmt_epg: oob

Example-2: This data model creates a syslog policy named syslog_policy_advanced. The policy has a single syslog destination server defined using an FQDN over tcp/1468. The log messages that have a severity level of information or higher for facility local7 will be sent to syslog server using the inb management epg. The log format is configured to use the nxos log format with timestamps that include milliseconds and show the timezone. This policy also disables alerts on the console.

apic:
fabric_policies:
monitoring:
syslogs:
- name: syslog_policy_advanced
description: Advanced Syslog Example
format: nxos
show_millisecond: true
show_timezone: true
console_admin_state: false
destinations:
- hostname_ip: syslogserver.example.com
name: syslog_server_2
protocol: tcp
port: 1468
facility: local7
severity: information
mgmt_epg: inb