Black Box ET1000A Appliance Trim Kit User Manual


 
ETEP Configuration
322 EncrypTight User Guide
Related topics:
“Log Event Settings” on page 322
“Defining Syslog Servers” on page 323
“Log File Management” on page 324
“Retrieving Appliance Log Files” on page 228
Log Event Settings
Categories of log messages are referred to as facilities, and they typically indicate which process
submitted a message. Each facility can be assigned a priority, which sets the level at which a log message
is triggered. Log events settings consist of a log facility and its priority level.
Five facilities are unique to the ETEP. When messages from these facilities are sent to a syslog server,
syslog displays their source as Local 0 - Local 4. Table 96 describes each facility and provides a mapping
of the ETEP facility name to its syslog counterpart. The Internals facility consists of several operating
system facilities.
The priority determines the amount of information that is recorded for a log facility. When you select a
priority for a facility, all messages at that priority and higher are logged; for example a priority of “error”
Table 96 Log facilities
Facility Description
Local0/System Significant system events that are not associated with the other pre-
defined facilities, including:
NTP clock sync successes and failures (informational priority)
Appliance software upgrade status (notice priority)
ET1000A power supply status changes (informational priority)
XML-RPC calls from ETEMS to the ETEP (debug priority)
Local1/Data plane Messages about packet processing and encryption
PMTU changes (debug priority)
Local 2/DistKey EncrypTight distributed key functionality, such as rekeys and policy
deployments (informational priority)
Local 3/PKI Certificate messages
Local 4/SNMP SNMP messages
Internals Operating system messages for the following Linux facilities: audit,
auth and authpriv, cron, daemon, kernel, syslog, user.
Audit log events are associated with a user name. The audit log
includes events such as the following:
Successful and unsuccessful log in attempts
Additions and deletions of ETEP user accounts
Use of administrator functions, such as appliance configuration
changes and policy deployments.