Logging

Monitor

To print logging events to the terminal, set the modules or events you wish to print to the terminal. For example, run: o–

switch (config) # logging monitor events notice
switch (config) # logging monitor sx-sdk warning

These commands print system events in severity “notice”, and “sx-sdk” module notifications in severity “warning” to the screen. For example, in case of interface-down event, the following gets printed to the screen:

switch (config) # 
Wed Jul 10 11:30:42 2013: Interface IB1/17 changed state to DOWN
Wed Jul 10 11:30:43 2013: Interface IB1/18 changed state to DOWN

To see a list of the events, refer to “Supported Event Notifications and MIB Mapping”.

Remote Logging

To configure remote syslog to send syslog messages to a remote syslog server:

Set remote syslog server.

switch (config) # logging <IP address/hostname>

(Optional) Set the destination port of the remote host.

switch (config) # logging <IP address/hostname> port <port>

(Optional) Filter log messages according to an input regex.

switch (config) # logging <IP address/hostname> filter <include/exclude> <regex>

Set the minimum severity of the log level to info.

switch (config) # logging <IP address/hostname> trap info

Override the log levels on a per-class basis.

switch (config) # logging <IP address/hostname> trap override class <class name> priority <level>

Logging Protocol

A feature that provides the ability to choose the protocol to use for sending syslog messages to a remote host: UDP (default) or TCP. See "Logging | id (8.2 3.12.6000)Logging loggingprotocol" command.

Logging Commands

	logging <IPv4 address/IPv6 address/hostname> no logging <IPv4 address/IPv6 address/hostname> Sends log messages to the remote host specified by its IP or hostname. The no form of the command stops sending log messages to the remote host specified by its IP or hostname.
Syntax Description	N/A
Default	N/A
Configuration Mode	config
History	3.1.1000
Role	admin
Example	switch (config) # logging 1.1.1.1 switch (config) # no logging 1.1.1.1
Related Commands
Notes	This command is configurable. If “configuration write” is executed, the remote host will still receive messages after reload.

logging port

	logging <syslog IPv4 address/IPv6 address/hostname> port <destination-port> no logging <syslog IPv4 address/IPv6 address/hostname> port Configures remote server destination port for log messages. The no form of the command resets the remote log port to its default value.
Syntax Description	destination-port	Range: 1-65535
	Hostname	Max 64 characters

Default	514 (UDP)
Configuration Mode	config
History	3.6.2002 3.8.1000—Updated command syntax
Example	switch (config) # logging 10.0.0.1 port 105
Related Commands	logging <syslog IPv4 address/IPv6 address/hostname> trap
Notes

logging trap

	logging <syslog IPv4 address/IPv6 address/hostname> [trap {<log-level> \| override class <class> priority <log-level>}] no logging <syslog IPv4 address/IPv6 address/hostname> [trap {<log-level> \| override class <class> priority <log-level>}] Enables (by setting the syslog IPv4 address/IPv6 address/hostname) sending logging messages, with ability to filter the logging messages according to their classes. The no form of the command stops sending messages to the remote syslog server.
Syntax Description	syslog IPv4 address/IPv6 address/hostname	syslog IPv4 address/IPv6 address/hostname of the remote syslog server Hostname is limited to 64 characters
	log-level	none—disables the logging locally and remotely 0 - emerg—system is unusable (emergency) 1 - alert—alert notification, action must be taken immediately 2 - crit—critical condition 3 - err—error condition 4 - warning—warning condition 5 - notice—normal, but significant condition 6 - info—informational condition 7 - debug—debug level messages
	class	Sets or removes a per-class override on the logging level. All classes which do not have an override set will use the global logging level set with “logging local <log level>”. Classes that do have an override will do as the override specifies. If “none” is specified for the log level, the software will not log anything from this class. Classes available: iss-modules—protocol stack mgmt-back—system management back-end mgmt-core—system management core mgmt-front—system management front-end mlx-daemons—management daemons sx-sdk—switch SDK

Default	Remote logging is disabled
Configuration Mode	config
History	3.6.2002 3.8.1000—Updated command syntax
Example	switch (config) # logging local info
Related Commands	show logging logging local override logging <syslog IPv4 address/IPv6 address/hostname> port
Notes

logging debug-files

	logging debug-files {delete {current \| oldest} \| rotation {criteria \| force \| max-num} \| update {<number> \| current} \| upload <log-file> <upload URL>} no logging debug-files rotation criteria Configures settings for debug log files. The "logging debug-files rotation criteria" command removes the debug rotation criteria configuration.
Syntax Description	delete {current \| oldest}	Deletes certain debug-log files. current—deletes the current active debug-log file oldest—deletes some of the oldest debug-log files
	rotation {criteria {frequency {daily \| weekly \| monthly} \| size <size> \| size-pct <percentage>} \| force \| max-num}	Configures automatic rotation of debug-logging files. criteria—sets how the system decides when to rotate debug filesfrequency—rotate log files on a fixed time-based schedulesize—rotate log files when they pass a size threshold in megabytessize-pct—rotate logs when they surpass a specified percentage of disk forces—forces an immediate rotation of the log files max-num—specifies the maximum number of old log files to keep
	update {<number> \| current}	Uploads a local debug-log file to a remote host. current—uploads log file “messages” to a remote host number—uploads compressed log file “debug.<number>.gz” to a remote host. Range is 1-10.
	upload	Uploads debug log file to a remote host
	log-file	Possible values: 1-7, or current
	upload URL	Supported formats: HTTP, HTTPS, FTP, TFTP, SCP and SFTP (e.g.: scp://username[:password]@hostname/path/filename)
Default	N/A
Configuration Mode	config
History	3.3.4150 3.9.0900: Added "no logging debug-files rotation criteria" command
Example	switch (config) # logging debug-files delete current
Related Commands
Notes

logging fields

	logging fields seconds {enable \| fractional-digits <f-digit> \| whole-digits <w-digit>} no logging fields seconds {enable \| fractional-digits <f-digit> \| whole-digits <w-digit>} Specifies whether to include an additional field in each log message that shows the number of seconds since the Epoch or not. The no form of the command disallows including an additional field in each log message that shows the number of seconds since the Epoch.
Syntax Description	enable	Specifies whether to include an additional field in each log message that shows the number of seconds since the Epoch or not.
	f-digit	The fractional-digits parameter controls the number of digits to the right of the decimal point. Truncation is done from the right. Possible values are: 1, 2, 3, or 6.
	w-digit	The whole-digits parameter controls the number of digits to the left of the decimal point. Truncation is done from the left. Except for the year, all of these digits are redundant with syslog's own date and time. Possible values: 1, 6, or all.
Default	Disabled
Configuration Mode	config
History	3.1.0000 3.12.5000 Removed fractional-digits and whole digits parameters 3.12.6000 Added fractional-digits and whole digits parameters
Example	switch (config) # logging fields seconds enable
Related Commands	show logging
Notes	This is independent of the standard syslog date and time at the beginning of each message in the format of “July 15 18:00:00”. Aside from indicating the year at full precision, its main purpose is to provide subsecond precision.

logging files delete

	logging files delete {current \| oldest [<number of files>]} Deletes the current or oldest log files.
Syntax Description	current	Deletes current log file
	oldest	Deletes oldest log file
	number of files	Sets the number of files to be deleted
Default	CLI commands and audit message are set to notice logging level
Configuration Mode	config
History	3.1.0000
Example	switch (config) # logging files delete current
Related Commands	show logging show log files
Notes

logging files rotation

	logging files rotation {criteria {frequency <freq> \| size <size-mb>\| size-pct <size-percentage>} \| force \| max-number <number-of-files>} no logging files rotation criteria Sets the rotation criteria of the logging files. The no form of the command removes the rotation criteria configuration.
Syntax Description	freq	Sets rotation criteria according to time. Possible options are: Daily Weekly Monthly
	size-mb	Sets rotation criteria according to size in megabytes Range: 1-9999 Default: 20MB
	size-percentage	Sets rotation criteria according to size in percentage of the partition where the logging files are kept in. The percentage given is truncated to three decimal points (thousandths of a percent).
	force	Forces an immediate rotation of the log files. This does not affect the schedule of auto-rotation if it was done based on time: the next automatic rotation will still occur at the same time for which it was previously scheduled. Naturally, if the auto-rotation was based on size, this will delay it somewhat as it reduces the size of the active log file to zero.
	number-of-files	The number of log files will be kept. If the number of log files ever exceeds this number (either at rotation time, or when this setting is lowered), the system will delete as many files as necessary to bring it down to this number, starting with the oldest.
Default	10 files are kept by default with rotation criteria of 5% of the log partition size
Configuration Mode	config
History	3.1.0000 3.9.0900: Added the command "no logging files rotation criteria" Changed default value size from 19.07 MB to 20 MB
Example	switch (config) # logging files rotation criteria size-pct 6
Related Commands	show logging show log files
Notes

logging files upload

	logging files upload {current \| <file-number>} <url> Uploads a log file to a remote host.
Syntax Description	current	The current log file. The current log file will have the name “messages” if you do not specify a new name for it in the upload URL.
	file-number	An archived log file. The archived log file will have the name “messages<n>.gz” (while “n” is the file number) if you do not specify a new name for it in the upload URL. The file will be compressed with gzip.
	url	Uploads URL path. Supported formats: FTP, TFTP, SCP, and SFTP. For example: scp://username[:password]@hostname/path/filename.
Default	10 files are kept by default with rotation criteria of 5% of the log partition size
Configuration Mode	config
History	3.1.0000
Example	switch (config) # logging files upload 1 scp://admin@scpserver
Related Commands	show logging show log files
Notes

logging filter include

	logging <IP address\hostname> filter include <regex> Sends only log messages that match the input regex to a remote host specified by its IP or hostname.
Syntax Description	N/A
Default	N/A
Configuration Mode	config
History	3.8.2000
Role	admin
Example	switch (config) # logging 1.1.1.1 filter include ERROR
Related Commands	loggin no logging
Notes	This command is configurable. If “configuration write” is executed, the remote host will still receive filtered messages after reload.

logging filter exclude

	logging <IP address\hostname> filter exclude <regex> Sends only log messages that do not match the input regex to a remote host specified by its IP or hostname.
Syntax Description	N/A
Default	N/A
Configuration Mode	config
History	3.8.2000
Role	admin
Example	switch (config) # logging 1.1.1.1 filter exclude ERROR
Related Commands	loggin no logging
Notes	This command is configurable. If “configuration write” is executed, the remote host will still receive filtered messages after reload.

no logging filter

	no logging <IP address\hostname> filter Sends unfiltered log messages to the configured remote host.
Syntax Description	N/A
Default	N/A
Configuration Mode	config
History	3.8.2000
Role	admin
Example	switch (config) # no logging 1.1.1.1 filter
Related Commands	loggin no logging
Notes	This command is configurable. If “configuration write” is executed, the remote host will still receive filtered messages after reload.

logging format

	logging format {standard \| welf [fw-name <hostname>]} no logging format {standard \| welf [fw-name <hostname>]} Sets the format of the logging messages. The no form of the command resets the format to its default.
Syntax Description	standard	Standard format
	welf	WebTrends Enhanced Log file (WELF) format
	hostname	Specifies the firewall hostname that should be associated with each message logged in WELF format. If no firewall name is set, the hostname is used by default. Hostname is limited to 64 characters.
Default	standard
Configuration Mode	config
History	3.1.0000
Example	switch (config) # logging format standard
Related Commands	show logging
Notes

logging level

	logging level {cli commands <log-level> \| audit mgmt <log-level>} Sets the severity level at which CLI commands or the management audit message that the user executes are logged. This includes auditing of both configuration changes and actions.
Syntax Description	cli commands	Sets the severity level at which CLI commands which the user executes are logged
	audit mgmt	Sets the severity level at which all network management audit messages are logged
	log-level	none—disables the logging locally and remotely 0 - emerg—system is unusable (emergency) 1 - alert—alert notification, action must be taken immediately 2 - crit—critical condition 3 - err—error condition 4 - warning—warning condition 5 - notice—normal, but significant condition 6 - info—informational condition 7 - debug—debug level messages
Default	CLI commands and audit message are set to notice logging level
Configuration Mode	config
History	3.1.0000
Example	switch (config) # logging level cli commands info
Related Commands	show logging
Notes

logging local override

	logging local override [class <class> priority <log-level>] no logging local override [class <class> priority <log-level>] Enables class-specific overrides to the local log level. The no form of the command disables all class-specific overrides to the local log level without deleting them from the configuration, but disables them so that the logging level for all classes is determined solely by the global setting.
Syntax Description	override	Enables class-specific overrides to the local log level.
	class	Sets or removes a per-class override on the logging level. All classes which do not have an override set will use the global logging level set with “logging local <log level>”. Classes that do have an override will do as the override specifies. If “none” is specified for the log level, the software will not log anything from this class. Classes available: debug-module—debug module functionality protocol-stack—protocol stack modules functionality mgmt-back—system management back-end components mgmt-core—system management core mgmt-front—system management front-end components mlx-daemons—management daemons sx-sdk—switch SDK
	log-level	none—disables the logging locally and remotely 0 - emerg—system is unusable (emergency) 1 - alert—alert notification, action must be taken immediately 2 - crit—critical condition 3 - err—error condition 4 - warning—warning condition 5 - notice—normal, but significant condition 6 - info—informational condition 7 - debug—debug level messages
Default	Override is disabled
Configuration Mode	config
History	3.1.0000 3.3.4150: Added debug-module class and changed iss-modules to protocol-stack
Example	switch (config) # logging local override class mgmt-front priority warning
Related Commands	show logging logging local
Notes

logging monitor

	logging monitor <facility> <priority-level> no logging monitor <facility> <priority-level> Sets monitor log facility and level to print to the terminal. The no form of the command disables printing logs of facilities to the terminal.
Syntax Description	facility	mgmt-front mgmt-back mgmt-core events sx-sdk mlnx-daemons iss-modules
	priority-level	none emerg alert crit err warming notice info debug
Default	no logging monitor
Configuration Mode	config
History	3.3.4000
Example	switch (config) # logging monitor events notice
Related Commands
Notes

logging protocol

	logging <IP address\hostname> protocol [tcp\|udp] no logging <IP address\hostname> protocol Sends log messages to specified host with the chosen protocol (TCP or UDP). The no form of the command sets the protocol for sending log messages to a remote host to the default (UDP).
Syntax Description	tcp	Sets protocol to TCP
	udp	Sets protocol to UDP
Default	UDP
Configuration Mode	Configure terminal
History	3.8.2100
Role	Admin
Example	switch (config) # logging 1.1.1.1 protocol tcp switch (config) # no logging 1.1.1.1 protocol
Related Commands
Notes	This command is configurable, so if “configuration write” is executed then after reboot the remote host will still receive messages with the configured protocol.

logging receive

	logging receive no logging receive Enables receiving logging messages from a remote host. The no form of the command disables the option of receiving logging messages from a remote host.
Syntax Description	N/A
Default	Receiving logging is disabled
Configuration Mode	config
History	3.1.0000
Example	switch (config) # logging receive
Related Commands	show logging logging local logging local override
Notes	This does not log to the console TTY port In-band management should be enabled in order to open a channel from the host to the CPU If enabled, only log messages matching or exceeding the minimum severity specified with the “logging local” command will be logged, regardless of what is sent from the remote host

logging facility

	logging facility [facility value] no logging facility Override the facility value for all remote messages. The "no" form of the command instructs not to override the Facility value of messages that are logged to remote systems.
Syntax Description	facility value	Options: 0 kern 1 user 2 mail 3 daemon 4 auth 5 syslog 6 lpr 7 news 8 uucp 9 cron 10 authpriv 16 local0 17 local1 18 local2 19 local3 20 local4 21 local5 22 local6 23 local7
Default	Override logging facility is disabled
Configuration Mode	config
History	3.12.4000
Example	switch (config) # logging facility local5
Related Commands	show logging logging logging receive
Notes	This feature is used on the system that is sending the logs to remote in order to override the facility value to the user configured value.

logging mac masking

	logging mac masking no logging mac masking Enables MAC address masking in logs. The no form of the command disables MAC address masking.
Syntax Description	N/A
Default	Enabled
Configuration Mode	config
History	3.9.0900
Example	switch (config) # logging mac masking
Related Commands	show logging
Notes	If enabled, the first 2 bytes of MAC address output log will be masked. For example, 00:12:34:56:78:9a will be displayed as ::34:56:78:9a.

show log

	show log [continuous \| files [<file-number>]] [[not] matching <reg-exp>] Displays the log file with optional filter criteria.
Syntax Description	continues	Displays the last few lines of the current log file and then continues to display new lines as they come in until the user hits Ctrl+C, similar to LINUX “tail” utility
	files	Displays the list of log files
	<file-number>	Displays an archived log file, where the number may range from 1 up to the number of archived log files available
	[not] matching <reg-exp>	The file is piped through a LINUX “grep” utility to only include lines either matching, or not matching, the provided regular expression
Default	N/A
Configuration Mode	Any command mode
History	3.1.0000 3.3.4402: Updated example and added note
Example
switch (config) # show log matching "Executing\|Action" Jul 31 16:11:23 M2100-aj cli[26502]: [cli.NOTICE]: user : Executing command: enableJul 31 16:11:24 M2100-aj cli[26507]: [cli.NOTICE]: user : Executing command: enableJul 31 16:11:29 M2100-aj cli[26514]: [cli.NOTICE]: user : Executing command: enableJul 31 16:11:29 M2100-aj cli[26514]: [cli.NOTICE]: user : Executing command: show licenseJul 31 16:11:41 M2100-aj cli[26548]: [cli.NOTICE]: user : Executing command: enableJul 31 16:11:42 M2100-aj cli[26553]: [cli.NOTICE]: user : Executing command: enableJul 31 16:11:42 M2100-aj cli[26553]: [cli.NOTICE]: user : Executing command: conf termina
Related Commands	logging fields logging files rotation logging level logging local logging receive show logging
Notes	When using a regular expression containing \| (OR), the expression should be surrounded by quotes (“<expression>”), otherwise it is parsed as filter (PIPE) command The command’s output has many of the options as the Linux “less” command. These options allow navigating the log file and perform searches. To see help for different option press “h” after running the “show log” command.

show logging

	show logging Displays the logging configurations.
Syntax Description	N/A
Default	N/A
Configuration Mode	Any command mode
History	3.1.0000 3.8.2000: Updated example 3.9.0900: Updated example 3.12.4000: Updated example with logging facility field
Role	Admin
Example	switch (config) # show logging Local logging level : noticeOverride for class debug-module : noticeDefault remote logging level : noticeAllow receiving of messages from remote hosts: noNumber of archived log files to keep : 10Log rotation size threshold : 19.07 megabytesLog rotation (debug) size threshold : 19.07 megabytesLog format : standardSubsecond timestamp field : disabledMAC address masking : enabledOverride Remote logging facility value : no Levels at which messages are logged: CLI commands : notice Audit messages: notice Remote syslog servers: 1.1.1.1: log level : notice Remote port : 514 Filter [include] regex: err 1.2.2.3: log level : notice Remote port: 33
Related Commands	logging fields logging files rotation logging level logging local logging receive logging <syslog IPv4 address/IPv6 address/hostname>
Notes

show logging port

	show logging port Displays the port logging configurations.
Syntax Description	N/A
Default	N/A
Configuration Mode	Any command mode
History	3.1.0000 3.8.1000: Updated example
Example	switch (config) # show logging Local logging level: notice Override for class debug-module: noticeDefault remote logging level: noticeRemote syslog receiver: 1.2.3.4 (log level: notice)Remote port: 514
Related Commands	logging port
Notes

no logging servers-all

	no logging servers-all This command deletes all the configured logging servers.
Syntax Description	N/A
Default	N/A
Configuration Mode	Configure terminal
History	3.12.3014
Example	`switch (config) # no logging servers-all`
Related Commands	[no] logging <logging-server>
Notes	If user has a logging server called ‘servers-all’ command “no logging servers-all” will delete all the servers (not only the one called servers-all).

Last updated: October 21, 2025