Soru

Zorluk: ZorSyslog Operations, Severity Levels, and Log Destination Configuration

A network administrator configures a Cisco IOS router with the following syslog parameters:

text
logging buffered 16000 informational
logging host 192.168.10.50
logging trap notifications
logging console errors

Which two statements correctly describe the behavior of syslog logging on this router? (Select two.)

  1. The remote syslog host at 192.168.10.50 receives log messages with severity levels 0 through 5, excluding informational and debugging messages.Cevap
  2. The internal logging buffer stores a broader range of severity levels than what is displayed on the router's local console interface.Cevap
  3. C
    The remote syslog host receives level 6 (Informational) and level 7 (Debugging) logs because higher severity numbers take priority during trap transmission.
  4. D
    The console interface outputs warning messages (severity level 4) because console logging automatically inherits the severity threshold configured for syslog trap messages.

Cevap

The remote syslog host receives messages from severity level 0 up through severity level 5 (Notifications), and the internal buffer records a wider variety of severity levels (levels 0-6) than the local console interface (levels 0-3).
The command 'logging trap notifications' sets the syslog server threshold to severity level 5. Cisco IOS syslog destinations process messages at or below the configured numeric level, so levels 0 through 5 are sent to the syslog server. Additionally, 'logging buffered informational' sets the buffer threshold to level 6 (levels 0-6), while 'logging console errors' limits console output to level 3 (levels 0-3), making the buffer capture a wider range of logs than the console.

Adım Adım Çözüm

1
Map the configured keywords to their corresponding Cisco IOS Syslog numeric severity levels.
Console = level 3 (Errors), Trap = level 5 (Notifications), Buffered = level 6 (Informational).
Cisco IOS syslog severity levels range from 0 (Emergency, most severe) to 7 (Debugging, least severe).
2
Evaluate the destination threshold for remote syslog trap forwarding.
Messages with severity levels 0, 1, 2, 3, 4, and 5 are sent to 192.168.10.50.
Configuring 'logging trap notifications' forwards messages at the specified severity level (5) and all lower numeric values.
3
Compare the destination thresholds between the logging buffer and console output.
Buffered logging captures levels 0-6, whereas console logging captures levels 0-3.
Level 6 includes more message types than level 3, making the buffer's scope broader than the console's.

Anahtar Kavram

Cisco IOS Syslog Severity Thresholds and Log Destination Operation
Bu soruyu puanla