Examkin

Question

Difficulty: MediumSyslog Operations, Severity Levels, and Log Destination Configuration

An enterprise router is experiencing intermittent interface flaps. To capture log messages for troubleshooting, an engineer configures the commands `logging host 172.16.10.5` and `logging trap notice` in global configuration mode. Which set of syslog severity levels will the router send to the remote server?

  1. Emergency, Alert, Critical, Error, Warning, and Notice (levels 0 through 5)Answer
  2. B
    Notice, Informational, and Debugging (levels 5 through 7)
  3. C
    Notice (level 5) only
  4. D
    Emergency, Alert, Critical, and Error (levels 0 through 3)

Answer

The router will send Emergency, Alert, Critical, Error, Warning, and Notice messages (numerical severity levels 0 through 5) to the remote syslog host.
In Cisco IOS, syslog trap thresholds include the configured severity level and all levels of higher criticality (which have lower numerical values). The `notice` keyword corresponds to severity level 5. Therefore, messages with severity levels 0 (Emergency), 1 (Alert), 2 (Critical), 3 (Error), 4 (Warning), and 5 (Notice) are forwarded to the configured syslog host.

Step-by-Step Solution

1
Identify the numerical value associated with the specified syslog severity keyword.
The syslog keyword `notice` corresponds to severity level 5.
Cisco IOS syslog severity levels range from 0 (Emergency) to 7 (Debugging), where level 5 represents Notice messages.
2
Apply the Cisco IOS trap logging threshold logic.
Configuring `logging trap notice` directs the router to send all log messages with a numerical severity level less than or equal to 5 (levels 0, 1, 2, 3, 4, and 5).
Lower numerical severity values indicate higher criticality in Syslog logging.

Key Concept

Syslog severity level threshold evaluation in Cisco IOS
Rate this question

Topics

Syslog Operations, Severity Levels, and Log Destination Configuration

More questions from this topic