System Logging Feature

Configure logging to disk and/or to a remote logging server.

Diagram

Classes

sdwan

Name	Type	Constraint	Mandatory	Default Value
feature_profiles	Class	feature_profiles	No

feature_profiles (sdwan)

Name	Type	Constraint	Mandatory	Default Value
system_profiles	List	system_profiles	No

system_profiles (sdwan.feature_profiles)

Name	Type	Constraint	Mandatory	Default Value
logging	Class	logging	No

logging (sdwan.feature_profiles.system_profiles)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,128}$	No	logging
description	String		No
disk_file_size	Integer	min: 1, max: 20	No
disk_file_size_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
disk_file_rotate	Integer	min: 1, max: 10	No
disk_file_rotate_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
ipv4_servers	List	ipv4_servers	No
ipv6_servers	List	ipv6_servers	No
tls_profiles	List	tls_profiles	No

logging (sdwan.feature_profiles.system_profiles)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,128}$	No	logging
description	String		No
disk_file_size	Integer	min: 1, max: 20	No
disk_file_size_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
disk_file_rotate	Integer	min: 1, max: 10	No
disk_file_rotate_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
ipv4_servers	List	ipv4_servers	No
ipv6_servers	List	ipv6_servers	No
tls_profiles	List	tls_profiles	No

ipv4_servers (sdwan.feature_profiles.system_profiles.logging)

Name	Type	Constraint	Mandatory	Default Value
hostname_ip	IP		No
hostname_ip_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
severity	Choice	informational, debugging, notice, warn, error, critical, alert, emergency	No
severity_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
source_interface	String	Regex: ^(GigabitEthernet|Loopback|TenGigabitEthernet|TwoGigabitEthernet|FortyGigabitEthernet|HundredGigE|Vlan)(([1-9]\d|\d)/){0,2}(0|[1-9]\d*)([:|\.][1-9]\d*)?	No
source_interface_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tls_enable	Boolean	true, false	No
tls_enable_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tls_properties_custom_profile	Boolean	true, false	No
tls_properties_custom_profile_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tls_properties_profile	String	min: 1	No
tls_properties_profile_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
vpn_id	Integer	min: 0, max: 65530	No
vpn_id_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

ipv4_servers (sdwan.feature_profiles.system_profiles.logging)

Name	Type	Constraint	Mandatory	Default Value
hostname_ip	IP		No
hostname_ip_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
severity	Choice	informational, debugging, notice, warn, error, critical, alert, emergency	No
severity_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
source_interface	String	Regex: ^(GigabitEthernet|Loopback|TenGigabitEthernet|TwoGigabitEthernet|FortyGigabitEthernet|HundredGigE|Vlan)(([1-9]\d|\d)/){0,2}(0|[1-9]\d*)([:|\.][1-9]\d*)?	No
source_interface_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
tls_enable	Boolean	true, false	No
tls_enable_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
tls_properties_custom_profile	Boolean	true, false	No
tls_properties_custom_profile_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
tls_properties_profile	String	min: 1	No
tls_properties_profile_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
vpn_id	Integer	min: 0, max: 65530	No
vpn_id_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No

ipv6_servers (sdwan.feature_profiles.system_profiles.logging)

Name	Type	Constraint	Mandatory	Default Value
hostname_ip	IP		No
hostname_ip_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
severity	Choice	informational, debugging, notice, warn, error, critical, alert, emergency	No
severity_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
source_interface	String	Regex: ^(GigabitEthernet|Loopback|TenGigabitEthernet|TwoGigabitEthernet|FortyGigabitEthernet|HundredGigE|Vlan)(([1-9]\d|\d)/){0,2}(0|[1-9]\d*)([:|\.][1-9]\d*)?	No
source_interface_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tls_enable	Boolean	true, false	No
tls_enable_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tls_properties_custom_profile	Boolean	true, false	No
tls_properties_custom_profile_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tls_properties_profile	String	min: 1	No
tls_properties_profile_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
vpn_id	Integer	min: 0, max: 65530	No
vpn_id_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

ipv6_servers (sdwan.feature_profiles.system_profiles.logging)

Name	Type	Constraint	Mandatory	Default Value
hostname_ip	IP		No
hostname_ip_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
severity	Choice	informational, debugging, notice, warn, error, critical, alert, emergency	No
severity_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
source_interface	String	Regex: ^(GigabitEthernet|Loopback|TenGigabitEthernet|TwoGigabitEthernet|FortyGigabitEthernet|HundredGigE|Vlan)(([1-9]\d|\d)/){0,2}(0|[1-9]\d*)([:|\.][1-9]\d*)?	No
source_interface_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
tls_enable	Boolean	true, false	No
tls_enable_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
tls_properties_custom_profile	Boolean	true, false	No
tls_properties_custom_profile_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
tls_properties_profile	String	min: 1	No
tls_properties_profile_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
vpn_id	Integer	min: 0, max: 65530	No
vpn_id_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No

tls_profiles (sdwan.feature_profiles.system_profiles.logging)

Name	Type	Constraint	Mandatory	Default Value
cipher_suites	List	Choice[aes-128-cbc-sha, aes-256-cbc-sha, dhe-aes-cbc-sha2, dhe-aes-gcm-sha2, ecdhe-ecdsa-aes-gcm-sha2, ecdhe-rsa-aes-cbc-sha2, ecdhe-rsa-aes-gcm-sha2, rsa-aes-cbc-sha2, rsa-aes-gcm-sha2]	No
cipher_suites_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
name	String	min: 1	No
name_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No
tls_version	Choice	TLSv1.1, TLSv1.2	No
tls_version_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,128}$	No

tls_profiles (sdwan.feature_profiles.system_profiles.logging)

Name	Type	Constraint	Mandatory	Default Value
cipher_suites	List	Choice[aes-128-cbc-sha, aes-256-cbc-sha, dhe-aes-cbc-sha2, dhe-aes-gcm-sha2, ecdhe-ecdsa-aes-gcm-sha2, ecdhe-rsa-aes-cbc-sha2, ecdhe-rsa-aes-gcm-sha2, rsa-aes-cbc-sha2, rsa-aes-gcm-sha2]	No
cipher_suites_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
name	String	min: 1	No
name_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No
tls_version	Choice	TLSv1.1, TLSv1.2	No
tls_version_variable	String	Regex: ^[./\[\]a-zA-Z0-9_-]{1,64}$	No

Examples

Example-1: This example is showing a basic logging to two Syslog servers. It is logging informational level and below. It is using in-band management VPN and a loopback interface as a source.

sdwan:
  feature_profiles:
    system_profiles:
      - name: system1
        description: this is test system profile
        logging:
          name: logging
          description: "Base Logging template; no TLS"
          ipv4_servers:
            - hostname_ip: 172.16.0.11
              severity: information
              source_interface: Loopback511
              vpn_id: 511
            - hostname_ip: 172.16.0.12
              severity: information
              source_interface: Loopback511
              vpn_id: 511