Log Message Format Description

Format of Log Message

The SYSLOG protocol uses UDP port 514 to transmit log messages. Any UDP packet on port 514 is considered a log message. The output format of a log message is shown in Figure 1. The log format on a switch is shown in Figure 1.

Figure 1 Output format of a Log message

Fields

Field	Description
TimeStamp UTC	It is the time when a log message is generated and sent to the log host. By default, it is the coordinated universal time (UTC), which can be configured to the host time. TimeStamp and HostName are separated by a space.
HostName	It is the system name of a local host. The default HostName is HUAWEI. HostName and ModuleName are separated by a space.
Huawei Identity	%% refers to the identity of Huawei, indicating that the log is produced by a Huawei product.
Version	dd is a two-digit number starting from 01. It specifies the version of a log format.
ModuleName	It specifies the module that generates log messages. ModuleName and Severity are separated by a slash (/).
Severity	Log messages are classified into eight severity levels, ranging from 0 to 7. Severity and Brief are separated by a slash (/).
Brief	It is a phrase that summarizes information.
Log Flag	The flag and Description are separated by a colon (:). l: Log t: Trap d: Debug s: Securitylog
Count	It specifies the log serial number.
Slot=A,Vcpu=B	It indicates the system component ID to which a log belongs. The Slot and Vcpu fields are optional and are not involved in each log. The output format varies depending on the actual situation.
Description	It is a string of characters that describe a detailed log message. It is output by a module to the information center. It is filled in by a module at each output time.

Example

Aug 6 2011 20:34:46 HUAWEI %% 01 HWCM/5/EXIT(l)[1]: exit from configure mode

The log message was generated at UTC time 20:34:46, Aug 6, 2011.
The host name is HUAWEI.
The log message was sent by the HWCM module.
The severity level of this log message is 5.
The description of this log message is exit from configuration mode.

Jan 8 2013 03:58:15+07:00 HUAWEI %% 01 HWCM/5/EXIT(l)[1]: exit from configure mode

The log message was generated at the local host time 10:58:15, Jan 8, 2013.
The host name is HUAWEI.
The log message was sent by the HWCM module.
The severity level of this log message is 5.
The description of this log message is exit from configuration mode.