System Logging Feature

Version:

Configure logging to disk and/or to a remote logging server.

Diagram

Classes

system_profiles (sdwan.feature_profiles)

Name	Type	Constraint	Mandatory	Default Value
logging	Class	`[logging]`	No

logging (sdwan.feature_profiles.system_profiles)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^[^&<>! "]{1,128}$`	No	`logging`
description	String		No
disk_file_size	Integer	min: `1`, max: `20`	No
disk_file_size_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
disk_file_rotate	Integer	min: `1`, max: `10`	No
disk_file_rotate_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
ipv4_servers	List	`[ipv4_servers]`	No
ipv6_servers	List	`[ipv6_servers]`	No
tls_profiles	List	`[tls_profiles]`	No

ipv4_servers (sdwan.feature_profiles.system_profiles.logging)

Name	Type	Constraint	Mandatory
hostname_ip	IP		No
hostname_ip_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
severity	Choice	`informational`, `debugging`, `notice`, `warn`, `error`, `critical`, `alert`, `emergency`	No
severity_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
source_interface	String	Regex: `^(GigabitEthernet\|Loopback\|TenGigabitEthernet\|TwoGigabitEthernet\|FortyGigabitEthernet\|HundredGigE\|Vlan)(([1-9]\d\|\d)/){0,2}(0\|[1-9]\d)([:\|\.][1-9]\d)?`	No
source_interface_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
tls_enable	Boolean	`true`, `false`	No
tls_enable_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
tls_properties_custom_profile	Boolean	`true`, `false`	No
tls_properties_custom_profile_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
tls_properties_profile	String	min: `1`	No
tls_properties_profile_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
vpn_id	Integer	min: `0`, max: `65530`	No
vpn_id_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No

ipv6_servers (sdwan.feature_profiles.system_profiles.logging)

Name	Type	Constraint	Mandatory
hostname_ip	IP		No
hostname_ip_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
severity	Choice	`informational`, `debugging`, `notice`, `warn`, `error`, `critical`, `alert`, `emergency`	No
severity_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
source_interface	String	Regex: `^(GigabitEthernet\|Loopback\|TenGigabitEthernet\|TwoGigabitEthernet\|FortyGigabitEthernet\|HundredGigE\|Vlan)(([1-9]\d\|\d)/){0,2}(0\|[1-9]\d)([:\|\.][1-9]\d)?`	No
source_interface_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
tls_enable	Boolean	`true`, `false`	No
tls_enable_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
tls_properties_custom_profile	Boolean	`true`, `false`	No
tls_properties_custom_profile_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
tls_properties_profile	String	min: `1`	No
tls_properties_profile_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
vpn_id	Integer	min: `0`, max: `65530`	No
vpn_id_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No

tls_profiles (sdwan.feature_profiles.system_profiles.logging)

Name	Type	Constraint	Mandatory
cipher_suites	List	Choice[`aes-128-cbc-sha`, `aes-256-cbc-sha`, `dhe-aes-cbc-sha2`, `dhe-aes-gcm-sha2`, `ecdhe-ecdsa-aes-gcm-sha2`, `ecdhe-rsa-aes-cbc-sha2`, `ecdhe-rsa-aes-gcm-sha2`, `rsa-aes-cbc-sha2`, `rsa-aes-gcm-sha2`]	No
cipher_suites_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
name	String	min: `1`	No
name_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No
tls_version	Choice	`TLSv1.1`, `TLSv1.2`	No
tls_version_variable	String	Regex: `^[./\[\]a-zA-Z0-9_-]{1,64}$`	No

Examples

Example-1: This example is showing a basic logging to two Syslog servers. It is logging informational level and below. It is using in-band management VPN and a loopback interface as a source.

sdwan:
  feature_profiles:
    system_profiles:
      - name: system1
        description: this is test system profile
        logging:
          name: logging
          description: "Base Logging template; no TLS"
          ipv4_servers:
            - hostname_ip: 172.16.0.11
              severity: information
              source_interface: Loopback511
              vpn_id: 511
            - hostname_ip: 172.16.0.12
              severity: information
              source_interface: Loopback511
              vpn_id: 511