Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[MX] How to change the severity level for a particular syslog message

0

0

Article ID: KB32328 KB Last Updated: 27 Dec 2017Version: 1.0
Summary:

The syslog message severity level does not always correspond with the importance of the message to a customer. This article provides a workaround for changing the severity of a syslog message dynamically.

Solution:

Some issues manifest themselves with a syslog message with low severity (for example, Debug). In a typical configuration, such log messages appear only in the debug file on the router and are not sent to an external syslog server. These log messages are difficult to monitor among many routers. A possible workaround is to apply the following event-policy:

policy raiseLogSeverity {
    events system;
    attributes-match {
        system.message matches “<some sentence from the syslog message>”;
    }
    then {
        priority-override {
            severity <new severity level>;
        }
    }
}

 

For example, the following message has, by default, the severity Debug:

May 4 11:57:10 router1 jdhcpd: %USER-7: NACK received for profile request with id=0xa3065b4 from bbe-smgd daemon: Subscriber prefix cannot be added retry FALSE


By using the following policy, the severity of the log is raised to Warning:

policy nackLog {
    events system;
    attributes-match {
        system.message matches “Subscriber prefix cannot be added retry FALSE”;   
    }
    then {
        priority-override {
             severity warning;
     }
   }
}

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search