Soru

Zorluk: OrtaSyslog Operations, Severity Levels, and Log Destination Configuration

A network administrator is configuring logging thresholds and destinations on a Cisco IOS device to monitor system events. Which TWO statements accurately describe Cisco IOS syslog operations and severity levels?

  1. The logging trap global configuration command specifies the severity threshold for syslog messages sent to an external syslog server.Cevap
  2. Syslog severity level 3 represents Error conditions, which are more critical than severity level 5 Notice conditions.Cevap
  3. C
    Configuring logging trap 4 prevents messages with severity level 2 (Critical) from being forwarded to the syslog server.
  4. D
    The logging buffered command enables the display of real-time log messages directly on active SSH and Telnet user terminal sessions.

Cevap

The statement that the 'logging trap' command sets the severity threshold for remote syslog servers and the statement that severity level 3 (Error) is more critical than severity level 5 (Notice) are correct.
The 'logging trap' global configuration command specifies the severity threshold for log messages forwarded to external syslog servers. Additionally, syslog severity numerical levels range from 0 (Emergency) to 7 (Debugging), meaning lower numerical values indicate higher severity/criticality. Severity level 3 (Error) is higher priority than severity level 5 (Notice).

Adım Adım Çözüm

1
Analyze the function of the 'logging trap' command
Confirm that 'logging trap' defines the severity threshold for forwarding log messages to a remote syslog daemon.
By default, Cisco IOS forwards messages up to level 6 (Informational) to configured syslog hosts, which is modified globally using 'logging trap <level>'.
2
Evaluate the syslog severity numerical hierarchy
Recall that syslog severity numbers range from 0 (Emergency - highest priority) to 7 (Debugging - lowest priority).
Lower numerical values represent higher criticality. Level 3 (Error) is therefore higher priority than Level 5 (Notice).
3
Evaluate the incorrect choices regarding logging thresholds and destinations
A trap threshold of 4 includes all levels 0 through 4 (so level 2 messages are sent). Displaying log messages on SSH or Telnet terminal sessions requires 'terminal monitor', whereas 'logging buffered' stores logs in system RAM.
Common candidate misconceptions invert numerical severity levels or confuse RAM log buffering with active terminal session monitoring.

Anahtar Kavram

Syslog Severity Levels and Log Destination Configuration
Bu soruyu puanla