Table Of Contents

Support Information for Cisco Syslogs

Cisco ASR Syslogs

Cisco IOS Syslogs

Cisco IOX Syslogs

Registry Parameters for Syslog Events

power supply removed syslog

Backup to Master syslog

link down syslog

dlci change syslog

hsrp syslog

snmp 5 snmp auth fail syslog

memory allocation syslog

process ran too long syslog

registered timer expired syslog

EIGRP router query to neighbors timeouted syslog

ethernet cable is not connected syslog

frmr report syslog

dtp 5 non port trunk syslog

line down syslog

ipx 3 bad igrp sap syslog

lance 5 coll syslog

lance 5 late coll syslog

sys 5 config i syslog

at 6 node wrong syslog

security 1 port shut down syslog

span tree 2 rx port fast syslog

Udld 3 disable syslog

udld 3 disable fail syslog

udld 4 one way path syslog

ospf neighbor syslog

span tree 2 loop guard block syslog

amdp2 fe 5 coll syslog

dec 21140-5 coll syslog

ilacc 5 coll syslog

pquicc 5 coll syslog

pquicc ether 5 coll syslog

pquicc fe 5 coll syslog

quicc ether 5 coll syslog

amdp2 fe 5 latecoll syslog

is is neighbor down syslog

dec 21140-5 late coll syslog

ilacc 5 late coll syslog

pquicc 5 late coll syslog

pquicc ether 5 late coll syslog

pquicc fe 5 late coll syslog

quicc ether 5 late coll syslog

snmp 5 link trap syslog

snmp 5 top trap syslog

dual5 neighbor change

link down syslog

bgp neighbor down syslog

card out syslog

oir sp 3 power cycle

reloading device syslog

system restart syslog

dtp 5 non port trunk syslog

isdn 6 connect syslog

duplex mismatch

isdn 6 connect syslog

tdp neighbor down syslog

ldp neighbor down syslog

mpls te tunnel reoptimized syslog

mpls te tunnel down syslog

environment monitoring 2 supply syslog

system sp restart syslog

udld sp 4 disable syslog

fabric sp 5 clear block off syslog

c6kenv sp 4 fan tray fail

pfredun sp 4 bootstring invalid

power supply failure syslog

pm sp stdby 4 err disable

Hsrp syslog

bgp notification syslog

bgp notification syslog

VSL link state change syslog

VSL role mismatch resolved syslog

env sp 4 fan tray failed syslog

pwr sp 2 power supply fail

bgp neighbor down syslog

vrrp state changed syslog

link down syslog

line down syslog

ospf neighbor syslog

envmon powersupply syslog

envmon condition syslog

envmon fan syslog

envmon temperature syslog

card out syslog

envmon powersupply syslog

envmon temperature syslog

envmon powersupply syslog

fabric hardware syslog

flash card removed syslog

memory allocation syslog

reset module syslog

card down syslog

card out syslog

pim neighbor loss syslog

pim interface down syslog

pim invalid join syslog

card down syslog

line down syslog

card out syslog

ldp neighbor down syslog

bgp neighbor down syslog

Login authentication failed syslog

if table in sync syslog

bfd session down syslog

layer 2 G709 alarm syslog

layer2 dwdm info syslog

layer1 PM TCA syslog

layer2 SPA failure syslog

ospf routing neighbor syslog

ipv6 ospfv3 routing neighbor down syslog

bfd rate limit high warning syslog

rip authentication failed syslog

rip configuration error syslog

rip out of memory event syslog

Support Information for Cisco Syslogs

---

This chapter provides detailed information about the Syslogs supported in Cisco ANA. It presents this information in:

•A section devoted to the supported Syslogs for a MIB (e.g., Cisco IOS Syslogs). Each of these sections contains a table listing the name of each ANA-supported syslog in that MIB, along with a description, the association key, raw format of the syslog string, and a short description.

•The Registry Parameters for Syslog Events section. This section provides tables of all the event subtypes, grouped according to the event type they share. The event subtype tables describe when these Syslogs are generated, and give information about how Cisco ANA processes them (such as their severity, and whether they are ticketable, can be correlated, are autocleared, and so on).

This chapter includes the following sections:

•Cisco ASR Syslogs

•Cisco IOS Syslogs

•Cisco IOX Syslogs

•Registry Parameters for Syslog Events

Cisco ASR Syslogs

Table 12-1 lists the Cisco ASR Syslogs supported in Cisco ANA.

Table 12-1 Cisco ASR Syslogs 

Syslog Name	Description	Raw Format	Short Description
PLATFORM-PWRMON-4-OIR	handle power supply syslog	%PLATFORM-PWRMON-4-OIR : Power-module 0/PM0/SP inserted	Power supply inserted syslog
PLATFORM-PWRMON-4-OIR	handle power supply syslog	%PLATFORM-PWRMON-4-OIR : Power-module 0/PM0/SP removed	Power supply removed syslog
IP-VRRP-6-INFO_STATECHANGE	handle VRRP state change syslog	%IP-VRRP-6-INFO_STATECHANGE : GigabitEthernet0_5_0_1 vrid 10: state Backup\t -> Master	Backup to Master change syslog
IP-VRRP-6-INFO_STATECHANGE	handle VRRP state change syslog	%IP-VRRP-6-INFO_STATECHANGE : GigabitEthernet0_5_0_1 vrid 10: state Master\t -> Backup	Master to Backup change syslog
L2-BFD-4-RATE_LIMIT_WARNING_HIGH_WATERMARK	BFD rate limit high warning syslog	%L2-BFD-4-RATE_LIMIT_WARNING_HIGH_WATERMARK BFD PPS allocation exceeds 90 percent of maximum.	BFD rate limit high warning syslog
ROUTING-RIP-3-ERR_PAK_AUTH	RIP Authentication Failure syslog	%ROUTING-RIP-3-ERR_PAK_AUTH Authentication failure for RIP [chars] packet in context [chars]: instance [chars]: error equals [chars]	RIP authentication failed syslog
ROUTING-RIP-3-ERR_CFG	RIP configuration error syslog	%ROUTING-RIP-3-ERR_CFG Error during configuration in context [chars]: error equals [chars]	RIP configuration error syslog
ROUTING-RIP-6-INFO_OOM	RIP out of memory event syslog	%ROUTING-RIP-6-INFO_OOM RIP out-of-memory event [chars]: new/current state equals [chars]: old state equals [chars]	RIP out of memory event syslog

Cisco IOS Syslogs

Table 12-2 lists the Cisco IOS syslogs supported in Cisco ANA.

Table 12-2 Cisco IOS Syslogs 

Syslog Name	Description	Raw Format	Short Description
LINK-5-CHANGED	handle link down syslog	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively up	Link down syslog
LINK-5-CHANGED	handle link down syslog	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively down	Link up syslog
FR-5-DLCICHANGE	handle dlci change syslog	%FR-5-DLCICHANGE: Interface Serial3/0/0:1 - DLCI 105 state changed to INACTIVE	FR DLCI down syslog
FR-5-DLCICHANGE	handle dlci change syslog	%FR-5-DLCICHANGE: Interface Serial3/0/0:1 - DLCI 105 state changed to ACTIVE	FR DLCI up syslog
STANDBY-6-STATECHANGE	handle hsrp syslog	%STANDBY-6-STATECHANGE: Standby: 1: Ethernet1 state Active -> Standby	HSRP group change syslog
STANDBY-6-STATECHANGE	handle hsrp syslog	%STANDBY-6-STATECHANGE: Standby: 1: Ethernet1 state Active -> Speak	HSRP group restored syslog
SNMP-5-SNMPAUTHFAIL	This message indicates that the switch has received an SNMP message that was not properly authenticated	%SNMP-5-SNMPAUTHFAIL: Authentication failed for message from 192.168.1.2	SNMP message has not properly authenticated
SYS-2-MALLOCFAIL	The requested memory allocation is not available from the specified memory pool	%SYS-2-MALLOCFAIL: Memory allocation of 1028 bytes failed from 0x6015EC84, Pool Processor, alignment 0	Memory allocation is not available
SYS-3-CPUHOG	The indicated process ran too long without relinquishing the processor	%SYS-3-CPUHOG: Task ran for 2148 msec (20/13), Process = IP Input, PC = 3199482 -Traceback= 314B5E6 319948A	process ran too long
SCHED-3-STUCKMTMR	A process can register to be notified when various events occur in the router. This message indicates that a registered timer is expired and its value is unchanged after the process has executed two successive times	%SCHED-3-STUCKMTMR: Sleep with expired managed timer 1C7410, time 0x1063F9C52 (00:00:00 ago).	registered timer is expired
DUAL-3-SIA	The EIGRP router hasn't received a reply to a query from one or more neighbors within the time allotted, so it clears the neighbors that didn't send a reply	%DUAL-3-SIA: Route 10.1.2.0/24 stuck-in-active state in IP-EIGRP 1. Cleaning up	EIGRP router query to neighbors timeouted syslog
LANCE-3-BADCABLE	The Ethernet cable is not connected	%LANCE-3-BADCABLE: msgtxt_badcable	Ethernet cable is not connected
LAPB-4-CTRLBAD	A received FRMR has reported a frame with an invalid control code	%LAPB-4-CTRLBAD: Interface Ethernet0, Invalid control field	frame with an invalid control code
DTP-5-NONTRUNKPORTON	The interface changed to non trunk	%DTP-5- ONTRUNKPORTON:Port 8/1 has become trunk	Interface changed to non trunk
DTP-5-NONTRUNKPORTON	The interface changed to non trunk	%DTP-5- ONTRUNKPORTON:Port 8/1 has become non-trunk	Interface changed to trunk
LINEPROTO-5-UPDOWN	handle line syslog	%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to down	Line down syslog
LINEPROTO-5-UPDOWN	handle line syslog	%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up	Line up syslog
IPX-3-BADIGRPSAP	A hardware or software error occurred	%IPX-3-BADIGRPSAP: Cannot send incremental SAP update to peer on interface Ethernet0. Increasing output-sap-delay may help	Cannot send incremental SAP update to peer
LANCE-5-COLL	An Ethernet cable is broken or unterminated, or the transceiver is unplugged	%LANCE-5-COLL : Unit 1, excessive collisions. TDR=10	An Ethernet cable is broken or unterminated
LANCE-5-LATECOLL	An Ethernet transceiver is unplugged or defective	%LANCE-5-LATECOLL: Unit 1, late collision error	An Ethernet transceiver is unplugged or defective
SYS-5-CONFIG_I	The router's configuration was changed	%SYS-5-CONFIG_I: Configured from console by console	Device configuration changed
AT-6-NODEWRONG	An AppleTalk node sent a GetNet Info request to this router specifying an invalid network number for the source of the GetNet Info request	%AT-6-NODEWRONG: XX: AppleTalk node 192.168.2.0 misconfigured; reply has been broadcast	AppleTalk invalid network number
SECURITY-1-PORTSHUTDOWN	This message indicates that a port has been shut down due to an insecure host sourcing a packet into that port	%Security-1-PORTSHUTDOWN: Port 0/1 shutdown due to security violation	security port shut down
SPANTREE-2-RX_PORTFAST	A BPDU that has spanning-tree portfast enabled was received on the specified interface	%SPANTREE-2-RX_PORTFAST:Received BPDU on PortFast enabled port. Disabling 2/1	BPDU spanning-tree portfast enabled
UDLD-3-DISABLE	This message indicates that a fault has been detected in a fiber Ethernet port connection and that the port has been disabled to prevent other protocols from malfunctioning	%UDLD-3-DISABLEFAIL: Unidirectional link detected on port 1/2, failed to disable port	Fault has been detected in a fiber Ethernet port connection
UDLD-3-DISABLEFAIL	This message indicates that a fault was detected in the wiring on a fiber Ethernet port, but UDLD could not disable the port	%UDLD-3-DISABLEFAIL: Unidirectional link detected on port 1/2, failed to disable port	Unidirectional link detected
UDLD-4-ONEWAYPATH	This message indicates that a fault has been detected in a fiber Ethernet connection in a shared media environment and that the connection may cause a possible malfunction	%UDLD-4-ONEWAYPATH: A unidirectional link from port 1/2 to port 1/2 of device abc was detected	Fault has been detected in a fiber Ethernet connection
OSPF-5-ADJCHG	handle ospf syslog	None	OSPF neighbor down syslog
OSPF-5-ADJCHG	handle ospf syslog	None	OSPF neighbor up syslog
SPANTREE-2-LOOPGUARDBLOCK	When the loop guard blocks an inconsistent port, the following message is logged	%SPANTREE-2-LOOPGUARDBLOCK: No BPDUs were received on port 3/2 in vlan 3. Moved to loop-inconsistent state	No BPDUs were received on port
SPANTREE-2-LOOPGUARDUNBLOCK	After the recovery, the following message is logged	%SPANTREE-2-LOOPGUARDUNBLOCK: port 3/2 restored in vlan 3	BPDUs were received on port
AMDP2_FE-5-COLL	Ethernet or Fast Ethernet is seeing multiple collisions. This problem may occur under heavy loads	%AMDP2_FE-5-COLL: AMDP2/FE Ethernet1/1, Excessive collisions, TDR=1, TRC=1	Ethernet is seeing multiple collisions
DEC21140-5-COLL	A Fast Ethernet packet has been dropped because too many attempts to transmit it were stopped by collisions	%DEC21140-5-COLL: unit 0, excessive collisions	Fast Ethernet packet has been dropped
ILACC-5-COLL	An Ethernet cable is broken or is not terminated, or the transceiver is unplugged	%ILACC-5-COLL: Unit 0, excessive collisions. TDR=0.12	An Ethernet cable is broken
PQUICC-5-COLL	PQUICC-5-COLL : An Ethernet cable is broken or is not terminated	%PQUICC-5-COLL: Unit 1, excessive collisions. Retry limit 12 exceeded	pquicc 5 coll syslog: An Ethernet cable is broken
PQUICC_ETHER-5-COLL	PQUICC_ETHER-5-COLL : An Ethernet cable is broken or is not terminated	%PQUICC_ETHER-5-COLL: Unit 1, excessive collisions. Retry limit 2 exceeded	pquicc ether 5 coll syslog: An Ethernet cable is broken
PQUICC_FE-5-COLL	Ethernet or Fast Ethernet is detecting multiple collisions	%PQUICC_FE-5-COLL: PQUICC/FE(0/1), Excessive collisions, TDR=10, TRC=10.	Ethernet is detecting multiple collisions
QUICC_ETHER-5-COLL	An Ethernet cable is broken or unterminated	%PQUICC_ETHER-5-COLL: Unit 1, excessive collisions. Retry limit 2 exceeded	quicc ether 5 coll syslog: An Ethernet cable is broken
AMDP2_FE-5-LATECOLL	Late collisions have occurred on the Ethernet or Fast Ethernet	%AMDP2_FE-5-LATECOLL: Ethernet1/1 transmit error	Late collisions have occurred on the Ethernet or Fast Ethernet interface
CLNS-5-ADJCHANGE	handle isis syslog	%CLNS-5-ADJCHANGE: ISIS: Adjacency to edge-02(POS0/0) Down, hold time expired	IS-IS neighbor down syslog
CLNS-5-ADJCHANGE	handle isis syslog	%CLNS-5-ADJCHANGE: ISIS: Adjacency to edge-02(POS0/0) Up, hold time expired	IS-IS neighbor up syslog
DEC21140-5-LATECOLL	Late collisions are collisions that occur after transmitting the preamble	%DEC21140-5-LATECOLL: FastEthernet0/0 transmit error	Late collisions have occurred
ILACC-5-LATECOLL	An Ethernet transceiver is malfunctioning, the Ethernet is overloaded, or the Ethernet cable is too long	%ILACC-5-LATECOLL: Unit 0, late collision error	ilacc 5 late coll syslog: Late collisions have occurred
PQUICC-5-LATECOLL	pquicc 5 late coll syslog	%PQUICC-5-LATECOLL: Unit 1, late collision error	pquicc 5 late coll syslog: Late collisions have occurred
PQUICC_ETHER-5-LATECOLL	PQUICC_ETHER-5-LATECOLL : A new network may not have been engineered properly or adding a regenerator to an existing network may have changed the network specifications	%PQUICC_ETHER-5-LATECOLL: Unit 0, late collision error	A new network may not have been engineered properly
PQUICC_FE-5-LATECOLL	Late collisions have occurred on the Ethernet or Fast Ethernet interface	%PQUICC_FE-5-LATECOLL: PQUICC/FE(0/1), Late collision	pquicc fe 5 late coll syslog: Late collisions have occurred
QUICC_ETHER-5-LATECOLL	QUICC_ETHER-5-LATECOLL : A software or hardware error occurred	%QUICC_ETHER-5-LATECOLL: Unit 0, late collision error	quicc ether 5 late coll syslog: Late collisions have occurred
SNMP-5-LINKTRAP	This message indicates the type of Link Trap	%SNMP-5-LINKTRAP: Link down Trap -- ifName=sc0	Link trap down has occurred
SNMP-5-LINKTRAP	This message indicates the type of Link Trap	%SNMP-5-LINKTRAP: Link up Trap -- ifName=sc0	Link trap up has occurred
SNMP-5-TOPOTRAP	his message indicates that a configured port changed from the learning state to the forwarding state, or from the forwarding state to the blocking state	%SNMP-5-TOPOTRAP: Topology Change Trap for VLAN 1	configured port changed state from learning to forwarding
DUAL-5-NBRCHANGE	handle eigrp syslog	%DUAL-5-NBRCHANGE: IP-EIGRP 1: Neighbor 10.1.4.3 (Serial0) is down: stuck in active	DUAL 5 neighbor down syslog
DUAL-5-NBRCHANGE	handle eigrp syslog	%DUAL-5-NBRCHANGE: IP-EIGRP 1: Neighbor 10.1.4.3 (Serial0) is up: stuck in active	DUAL 5 neighbor up syslog
LINK-3-UPDOWN	handle link down syslog	%LINK-3-UPDOWN: Interface ATM2/0, changed state to down	Link down syslog
LINK-3-UPDOWN	handle link down syslog	%LINK-3-UPDOWN: Interface ATM2/0, changed state to up	Link up syslog
BGP-5-ADJCHANGE-vrf	handle BGP 5 syslog from vrf. make sure it is before the "BGP-5-ADJCHANGE" pattern	%BGP-5-ADJCHANGE: neighbor 10.1.2.3 vpn vrf inet Down	BGP neighbor down syslog
BGP-5-ADJCHANGE-vrf	handle BGP 5 syslog from vrf. make sure it is before the "BGP-5-ADJCHANGE" pattern	%BGP-5-ADJCHANGE: neighbor 10.1.2.3 vpn vrf inet Up	BGP neighbor up syslog
BGP-5-ADJCHANGE	handle BGP 5 syslog	%BGP-5-ADJCHANGE: neighbor 161.10.11.1 Down	BGP neighbor down syslog
BGP-5-ADJCHANGE	handle BGP 5 syslog	%BGP-5-ADJCHANGE: neighbor 161.10.11.1 Up	BGP neighbor up syslog
OIR-6-(REM|INS)CARD	handle module out syslog	%OIR-6-REMCARD: Card inserted from slot 4, interfaces disabled	card in syslog
OIR-6-(REM|INS)CARD	handle module out syslog	%OIR-6-REMCARD: Card removed from slot 4, interfaces disabled	card out syslog
OIR-SP-3-PWRCYCLE	card being power cycled	%OIR-SP-3-PWRCYCLE: Card in module x, is being power-cycled off (Module not responding to Keep Alive polling)	oir sp 3 power cycle syslog
SYS-5-RELOAD	syslog for reloading the device	%SYS-5-RELOAD: Reload requested	Reloading device syslog
SYS-5-RESTART	syslog for restarting the device	%SYS-5-RESTART: System restarted --	System restart
DTP-5-TRUNKPORTON	The interface returned to be a trunk	%DTP-5-TRUNKPORTON:Port 7/2 has become interface trunk	Interface changed to non trunk
DTP-5-TRUNKPORTON	The interface returned to be a trunk	%DTP-5-TRUNKPORTON:Port 7/2 has become dot1q trunk	Interface changed to trunk
ISDN-6-CONNECT	handle ISDN connect syslog	%ISDN-6-CONNECT: Interface BRI0/0:1 is now connected to 5772223	ISDN connect syslog
ISDN-6-CONNECT	handle ISDN connect syslog	%ISDN-6-CONNECT: Interface BRI0/0:1 is now connected to 5772223	ISDN disconnect syslog
ISDN-6-DISCONNECT	handle ISDN connect syslog	%ISDN-6-DISCONNECT: Interface BRI0:1? disconnected from 8130 traxbol, call lasted 60 seconds	ISDN connect syslog
ISDN-6-DISCONNECT	handle ISDN connect syslog	%ISDN-6-DISCONNECT: Interface BRI0:1? disconnected from 8130 traxbol, call lasted 60 seconds	ISDN disconnect syslog
CDP-4-DUPLEX_MISMATCH	This messages indicates a duplex mismatch problem (IOS)	%CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet6/2 (not half duplex), with TBA04251336 3/2 (half duplex)	Duplex mismatch discovered
ISDN-6-CONNECT-2	handle ISDN connect syslog2	None	ISDN connect syslog
ISDN-6-CONNECT-2	handle ISDN connect syslog2	None	ISDN disconnect syslog
ISDN-6-DISCONNECT-2	handle ISDN disconnect syslog2	None	ISDN connect syslog
ISDN-6-DISCONNECT-2	handle ISDN disconnect syslog2	None	ISDN disconnect syslog
LDP-5-NBRCHG-TDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: TDP Neighbor 10.10.10:0 is DOWN (TCP connection closed by peer)	TDP neighbor down syslog
LDP-5-NBRCHG-TDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: TDP Neighbor 10.10.10:0 is UP (TCP connection closed by peer)	TDP neighbor up syslog
LDP-5-NBRCHG-LDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: LDP Neighbor 10.12.12.12:0 is DOWN	LDP neighbor down syslog
LDP-5-NBRCHG-LDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: LDP Neighbor 10.12.12.12:0 is UP	LDP neighbor up syslog
MPLS_TE-5-TUN_reoptimize	handle tunnel reoptimization syslog	None	MPSL-TE tunnel reoptimized/rerouted syslog
MPLS_TE-5-TUN_up	handle tunnel up syslog	%MPLS_TE-5-TUN: Tun0: installed LSP 0_26 (popt 5) for nil, got 1st feasible path opt	MPLS-TE tunnel down syslog
MPLS_TE-5-TUN_up	handle tunnel up syslog	%MPLS_TE-5-TUN: Tun0: installed LSP 0_26 (popt 5) for nil, got 1st feasible path opt	MPLS-TE tunnel up syslog
MPLS_TE-5-TUN_down	handle tunnel down syslog	%MPLS_TE-5-TUN: Tun1001: installed LSP nil for 1001_92 (popt 1), path verification failed	MPLS-TE tunnel down syslog
MPLS_TE-5-TUN_down	handle tunnel down syslog	%MPLS_TE-5-TUN: Tun1001: installed LSP nil for 1001_92 (popt 1), path verification failed	MPLS-TE tunnel up syslog
ENV_MON-2-SUPPLY	Power supply is not working or has not been turned on	%ENV_MON-2-SUPPLY : [chars] Power Supply is Operation or Non-Operational	A power supply is not working or has not been turned on
SYS-SP-STDBY-5-RESTART	restarting the device	%SYS-SP-STDBY-5-RESTART: System restarted -- Cisco IOS Software (c7600s72033-ADVENTERPRISEK9_WAN_MZ), Version 12.2 Copyright (c) 1986-2006 by Cisco Systems, Inc.Compiled Thu 26-Oct-06 03:49 by	System restart
UDLD-SP-4-UDLD_PORT_DISABLED	aggressive mode failure detected	None	Aggressive Mode Failure Detected
FABRIC-SP-5-FABRIC_MODULE_BACKUP	clear block option	%FABRIC-SP-5-FABRIC_MODULE_BACKUP: The Switch Fabric Module in slot 6 became standby	fabric sp 5 clear block down syslog
FABRIC-SP-5-FABRIC_MODULE_BACKUP	clear block option	%FABRIC-SP-5-FABRIC_MODULE_BACKUP: The Switch Fabric Module in slot 6 became standby	fabric sp 5 clear block up syslog
C6KENV-SP-4-FANTRAYFAILED	fan tray failed	%C6KENV-SP-4-FANTRAYFAILED: fan tray 2 failed	c6kenv sp 4 fan tray fail syslog
PFREDUN-SP-4-BOOTSTRING_INVALID	bootstring invalid	%PFREDUN-SP-4-BOOTSTRING_INVALID: The bootfile slavesup-bootflash: is not present in standby	pfredun sp 4 bootstring invalid syslog
SYS-5-POWER-SUPPLY	Power supply failure notification	None	Power supply failed syslog
SYS-5-POWER-SUPPLY	Power supply failure notification	None	Power supply okay syslog
SYS-5-POWER-SUPPLY	Power supply failure notification	None	Redundant Power System Failed
PM-SP-STDBY-4-ERR_DISABLE	err disable state	%PM-SP-STDBY-4-ERR_DISABLE: bpduguard error detected on Gi2/5, putting Gi2/5 in err-disable state	pm sp stdby 4 err disable syslog
HSRP-6-STATECHANGE	handle hsrp syslog	%HSRP-6-STATECHANGE:FastEthernet0/0 Grp 1 state Init	HSRP group change syslog
HSRP-6-STATECHANGE	handle hsrp syslog	%HSRP-6-STATECHANGE:FastEthernet0/0 Grp 1 state Standby	HSRP group restored syslog
BGP-3-NOTIFICATION	handle BGP 3 syslog	%BGP-3-NOTIFICATION: sent to neighbor 10.10.10.254 4/0 (hold time expired) 0 bytes	BGP notification syslog
NEW-INTERFACE-FOR-VSL-CONNECTION	new interface for the VSL connection syslog (one of the ether channel interfaces)	%VSL-5-VSL_CNTRL_LINK	new ethernet channel interface for VSL connection
VSL-LINK-UP	VSL link up syslog	%VSLP-5-VSL_UP	VSL link up syslog
VSL-LINK-DOWN	VSL link down syslog	%VSLP-SW1_SP-2-VSL_DOWN	VSL link down syslog
VSL-LINK-UP	VSL link up syslog and active switch is #1	%VSLP-SW1_SP-5-VSL_UP	VSL link up syslog: active switch is #1
VSL-LINK-UP	VSL link up syslog and active switch is #2	%VSLP-SW2_SP-5-VSL_UP	VSL link up syslog: active switch is #2
VSL-ROLE-MISMATCH-RESOLVED	role mismatch resolved syslog, sent from active switch #1	%VSLP-SW1_SP-5-RRP_ROLE_RESOLVED	role mismatch resolved syslog, sent from active switch #1
VSL-ROLE-MISMATCH-RESOLVED	role mismatch resolved syslog, sent from active switch #2	%VSLP-SW2_SP-5-RRP_ROLE_RESOLVED	role mismatch resolved syslog, sent from active switch #2
ENV-SP-4-FANTRAYFAILED	fan tray failed	%C7600_ENV-SP-4-FANTRAYFAILED: fan tray 2 failed	env sp 4 fan tray fail syslog
PWR-SP-2-PSFAIL	power supply failed	%C7600_PWR-SP-2-PSFAIL: power supply 1 output failed.	pwr sp 2 power supply fail syslog
BGP-5-ADJCHANGE-bfd	handle BGP 5 syslogs for BFD	%BGP-5-ADJCHANGE: neighbor 192.168.20.1 Down BFD adjacency down	BGP neighbor down syslog
BGP-5-ADJCHANGE-bfd	handle BGP 5 syslogs for BFD	%BGP-5-ADJCHANGE: neighbor 192.168.20.1 UP BFD adjacency up	BGP neighbor up syslog
VRRP-6-STATECHANGE	Virtual Router Redundancy Protocol (VRRP) message: The VRRP router has changed state.	%VRRP-6-STATECHANGE: Fa0/1 Grp 1 state Backup -> Master	VRRP State Changed syslog

Cisco IOX Syslogs

Table 12-3 lists the Cisco IOX Syslogs supported in Cisco ANA.

Table 12-3 Cisco IOX Syslogs 

Syslog Name	Description	Raw Format	Short Description
LINK-3-UPDOWN	The interface hardware has gone either down or up.	%LINK-3-UPDOWN: Interface ATM2/0, changed state to down	Link down syslog
LINK-3-UPDOWN	The interface hardware has gone either down or up.	%LINK-3-UPDOWN: Interface ATM2/0, changed state to up	Link up syslog
LINK-5-CHANGED	The interface has changed state.	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively up	Link down syslog
LINK-5-CHANGED	The interface has changed state.	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively down	Link up syslog
LINEPROTO-5-UPDOWN	The data link level line protocol changed state.	%LINEPROTO-5-UPDOWN: Line protocol on Interface [chars], changed state to [chars] Example %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up	Line down syslog
LINEPROTO-5-UPDOWN	The data link level line protocol changed state.	%LINEPROTO-5-UPDOWN: Line protocol on Interface [chars], changed state to [chars] Example %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up	Line up syslog
OSPF-5-ADJCHG	An OSPF neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPF-5-ADJCHG : Process [dec], Nbr [int] on [chars] from [chars] to [chars], [chars] Example %OSPF-5-ADJCHG: Process 1, Nbr 192.168.100.100 on POS1/0 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPF neighbor down syslog
OSPF-5-ADJCHG	An OSPF neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPF-5-ADJCHG : Process [dec], Nbr [int] on [chars] from [chars] to [chars], [chars] Example %OSPF-5-ADJCHG: Process 1, Nbr 192.168.100.100 on POS1/0 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPF neighbor up syslog
ENVMON-ADDITIVE-POWER-OVERBUDGET	The power calculated in use by the chassis exceeds that available by the powershelf. This condition could result in an outage of the chassis if action is not immediately taken	ENVMON-.-ADDITIVE_POWER_OVERBUDGET.*:.*	envmon powersupply syslog
ENVMON-ENV-CONDITION	One or more environmental conditions exist on the specified slot. If left untended, they could result in loss of service or even hardware damage	ENVMON-.-(ENV_CONDITION_CLEAR|ENV_CONDITION).*slot\s+(\d+).*	envmon condition syslog
ENVMON-ENV-CONDITION	One or more environmental conditions exist on the specified slot. If left untended, they could result in loss of service or even hardware damage	ENVMON-.-(ENV_CONDITION_CLEAR|ENV_CONDITION).*slot\s+(\d+).*	envmon condition clear syslog
ENVMON-FAN	The fan array specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	ENVMON-.-(FAN_CLEAR|FAN).*array\s+(\S+).*	envmon fan syslog
ENVMON-FAN	The fan array specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	ENVMON-.-(FAN_CLEAR|FAN).*array\s+(\S+).*	envmon fan clear syslog
ENVMON-LOW-FAN-SPEED-WARNING	Indicates that the fan is spinning very slow	LOW_FAN_SPEED_WARNING :\s(\w+).*	envmon fan syslog
ENVMON-OVERTEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	ENVMON-.-(OVERTEMP_CLEAR|OVERTEMP).*(\S+)\s+temperature.*	envmon tempretaure syslog
ENVMON-OVERTEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	ENVMON-.-(OVERTEMP_CLEAR|OVERTEMP).*(\S+)\s+temperature.*	envmon tempretaure clear syslog
ENVMON-PEM-REMOVE	The power entry module specified was detected as removed	ENVMON-.-PEM_(REMOVE|INSERT).*slot\s+(\d+).*	card out syslog
ENVMON-PEM-REMOVE	The power entry module specified was detected as removed	ENVMON-.-PEM_(REMOVE|INSERT).*slot\s+(\d+).*	card in syslog
ENVMON-POWERSUPPLY-CURRENT	handle envmon powersupply current syslog	ENVMON-.-(POWERSUPPLY_CURRENT_CLEAR|POWERSUPPLY_CURRENT).*(\S+)\s+current.*	envmon powersupply syslog
ENVMON-POWERSUPPLY-CURRENT	The current supply specified has reached a critical level and is now out of specification	ENVMON-.-(POWERSUPPLY_CURRENT_CLEAR|POWERSUPPLY_CURRENT).*(\S+)\s+current.*	envmon powersupply clear syslog
ENVMON-POWERSUPPLY-NONOP	The power supply specified has become non-operational	ENVMON-.-(POWERSUPPLY_NONOP_CLEAR|POWERSUPPLY_NONOP).*:\s+(\S+).*	envmon powersupply syslog
ENVMON-POWERSUPPLY-NONOP	The power supply specified has become non-operational	ENVMON-.-(POWERSUPPLY_NONOP_CLEAR|POWERSUPPLY_NONOP).*:\s+(\S+).*	envmon powersupply clear syslog
ENVMON-POWERSUPPLY-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	ENVMON-.-(POWERSUPPLY_VOLTAGE_CLEAR|POWERSUPPLY_VOLTAGE).*(\S+)\s+voltage.*	envmon powersupply syslog
ENVMON-POWERSUPPLY-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	ENVMON-.-(POWERSUPPLY_VOLTAGE_CLEAR|POWERSUPPLY_VOLTAGE).*(\S+)\s+voltage.*	envmon powersupply clear syslog
ENVMON-TEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	ENVMON-.-(TEMP_CLEAR|TEMP).*(\S+)\s+temperature.*	envmon tempretaure syslog
ENVMON-TEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	ENVMON-.-(TEMP_CLEAR|TEMP).*(\S+)\s+temperature.*	envmon tempretaure clear syslog
ENVMON-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	ENVMON-.-(VOLTAGE_CLEAR|VOLTAGE).*(\S+)\s+voltage.*	envmon powersupply syslog
ENVMON-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	ENVMON-.-(VOLTAGE_CLEAR|VOLTAGE).*(\S+)\s+voltage.*	envmon powersupply clear syslog
FIA-FIAHW-LOS	This error indicates a problem (Loss of Sync) in the interface between the card reporting error and the switch fabric card in the indicated slot. This error is traffic affecting. Error recovery is triggered by this error	ENVMON-.-(FIAHW_LOS_CLEAR|FIAHW_LOS).*slot\s+(\d+).*	fabric hardware syslog
FIA-FIAHW-LOS	This error indicates a problem (Loss of Sync) in the interface between the card reporting error and the switch fabric card in the indicated slot. This error is traffic affecting. Error recovery is triggered by this error	ENVMON-.-(FIAHW_LOS_CLEAR|FIAHW_LOS).*slot\s+(\d+).*	fabric hardware clear syslog
FLASH-CARD-REMOVAL	handle flash card insertion or removal syslog	libpcmcia_ide-.-CARD_(UNAVAILABLE|SWAPPED).*:\s+(\S+):.*	flash card removed syslog
FLASH-CARD-REMOVAL	handle flash card insertion or removal syslog	libpcmcia_ide-.-CARD_(UNAVAILABLE|SWAPPED).*:\s+(\S+):.*	flash card inserted syslog
LIBPARSER-ERR-MEMALLOC	handle memory allocation in syslog	LIBPARSER-.-ERR_MEM_ALLOC.*:.*	Memory allocation is not available
NODE-RELOAD	handle node reload syslog by sysldr	PLATFORM-SHELFMGR-3-SHUTDOWN_RESET.*	Module reset syslog
NODE-STATE-CHANGE	Indicates a change in the card oper status	NODE_STATE_CHANGE.*Node:\s+(\S+),\s+state:\s+(IOS XR RUN|DOWN|BRINGDOWN|UNPOWERED|OK|NOT)	Card oper status changed
NODE-STATE-CHANGE	Indicates a change in the card oper status	NODE_STATE_CHANGE.*Node:\s+(\S+),\s+state:\s+(IOS XR RUN|DOWN|BRINGDOWN|UNPOWERED|OK|NOT)	Card oper status changed
OIROUT	handle module out syslog	.*(OIROUT|OIRIN).*:.*Node\s+(\d+)/(\D*)(\d+)/(\d*).*	card out syslog
OIROUT	handle module out syslog	.*(OIROUT|OIRIN).*:.*Node\s+(\d+)/(\D*)(\d+)/(\d*).*	card in syslog
OIROUT-on-CPU0	handle module out syslog	.*(OIROUT|OIRIN).*:.*Node\s+(\d+)/(\D*)(\d+)/(\*).*	card out syslog
OIROUT-on-CPU0	handle module out syslog	.*(OIROUT|OIRIN).*:.*Node\s+(\d+)/(\D*)(\d+)/(\*).*	card in syslog
PIM-5-NBRCHG	handle pim neighbor syslog	PIM-5-NBRCHG.*neighbor (\d*\.\d*\.\d*\.\d*)\s+(DOWN|UP) on (\S+).*	pim neighbor loss syslog
PIM-5-NBRCHG	handle pim neighbor syslog	PIM-5-NBRCHG.*neighbor (\d*\.\d*\.\d*\.\d*)\s+(DOWN|UP) on (\S+).*	pim neighbor up syslog
PIM-5-UPDOWN	handle pim interface syslog	PIM-5-INTCHG.*interface (\S+).*(UP|DOWN).*	pim interface down syslog
PIM-5-UPDOWN	handle pim interface syslog	PIM-5-INTCHG.*interface (\S+).*(UP|DOWN).*	pim interface up syslog
PIM-INVALID-JOIN	handle pim invlid join in syslog	ROUTING_IPV4_PIM-.-INVALID_JP.*	pim invalid join syslog
POWERDOWN-RESET	Indicates that the node will be reset because the user has administratively `power disable' or `no power disable' the node	SHELFMGR-3-POWERDOWN_RESET.*Node\s+(\S+).*powered\s+(off|on).*	Card oper status changed
POWERDOWN-RESET	Indicates that the node will be reset because the user has administratively `power disable' or `no power disable' the node	SHELFMGR-3-POWERDOWN_RESET.*Node\s+(\S+).*powered\s+(off|on).*	Card oper status changed
SONET-LOCAL-4-ALARM	The specified SONET Alarm has been declared or released	SONET_LOCAL-4-ALARM.*S[a-zA-Z]*([^,]*):\s*[A-Z]*\s*(cleared)	Line down syslog
SONET-LOCAL-4-ALARM	The specified SONET Alarm has been declared or released	SONET_LOCAL-4-ALARM.*S[a-zA-Z]*([^,]*):\s*[A-Z]*\s*$	Line up syslog
SPA-OIROUT	handle invmgr node state change syslog	.*LC/\d+/(\d).*SPA-.-OIR_(REMOVED|INSERTED).*bay\s+(\d).*	card out syslog
SPA-OIROUT	handle invmgr node state change syslog	.*LC/\d+/(\d).*SPA-.-OIR_(REMOVED|INSERTED).*bay\s+(\d).*	card in syslog
ROUTING-LDP-5-NBR_CHANGE	A LDP neighbor has changed state (up/down). If neighbor has went down, then a reason for session going down is also displayed. This message appears only if the log neighbor command is configured for the LDP process.	.*ROUTING-LDP-5-NBR_CHANGE : Neighbor (\d*\.\d*\.\d*\.\d*:\d*).*(UP|DOWN).*	LDP neighbor down syslog
ROUTING-LDP-5-NBR_CHANGE	A LDP neighbor has changed state (up/down). If neighbor has went down, then a reason for session going down is also displayed. This message appears only if the log neighbor command is configured for the LDP process.	.*ROUTING-LDP-5-NBR_CHANGE : Neighbor (\d*\.\d*\.\d*\.\d*:\d*).*(UP|DOWN).*	LDP neighbor up syslog
BGP-5-ADJCHANGE	The adjacent BGP neighbor was lost	.*BGP-5-ADJCHANGE.*:.*bor (\d*\.\d*\.\d*\.\d*) .*(Down|Up|up|down).*	BGP neighbor down syslog
BGP-5-ADJCHANGE	The adjacent BGP neighbor was lost	.*BGP-5-ADJCHANGE.*:.*bor (\d*\.\d*\.\d*\.\d*) .*(Down|Up|up|down).*	BGP neighbor up syslog
SECURITY-4-AUTHEN_FAILED	The user login authentication failed	.*SECURITY-login-4-AUTHEN_FAILED : Failed authentication attempt .*	Login authentication failed syslog
MGBL-INVENTORY-6-PORTS	Sent by the XR device after a card-in event has occured and the If and Entity tables are in sync. Once ANA receives the syslog, it will expedite the physical command instead of the card-in syslogs doing the expedite, so that the polling is done only after the tables are synchronized.	%MGBL-INVENTORY-6-PORTS : ifTable INSYNC for card:0/PL7/* entPhysicalIndex:239	If-Table in sync syslog
L2-BFD-6-SESSION_STATE_DOWN	The bfd session is down	.*L2-BFD-6-SESSION_(?:STATE_UP|STATE_DOWN|REMOVED) : BFD session to neighbor (\d*\.\d*\.\d*\.\d*) on interface (\S*).*(up|down|removed).*	BFD neighbor down syslog
L2-BFD-6-SESSION_REMOVED	The bfd session has been removed	.*L2-BFD-6-SESSION_(?:STATE_UP|STATE_DOWN|REMOVED) : BFD session to neighbor (\d*\.\d*\.\d*\.\d*) on interface (\S*).*(up|down|removed).*	BFD neighbor removed syslog
L2-BFD-6-SESSION_STATE_UP	The bfd session is up	.*L2-BFD-6-SESSION_(?:STATE_UP|STATE_DOWN|REMOVED) : BFD session to neighbor (\d*\.\d*\.\d*\.\d*) on interface (\S*).*(up|down|removed).*	BFD neighbor up syslog
L2-BFD-6-SESSION_STATE_UP	The bfd session is up	%L2-BFD-6-SESSION_STATE_UP BFD session to neighbor [chars] on interface [chars] is up	BFD neighbor up syslog
L2-G709-4-ALARM	The specified G709 Alarm has been declared or released	%L2-G709-4-ALARM [chars]: [chars] [chars]	Layer2 G709 alarm syslog
L2-G709-4-ALARM-CLEARED	The specified G709 Alarm has been declared or released	%L2-G709-4-ALARM [chars]: [chars] [chars]	Layer2 G709 clear syslog
L2-DWDM-3-INFO	The DWDM encountered an error that would lead to degraded service	%L2-DWDM-3-INFO dwdm: service degrading error, reason = [chars]	Layer2 dwdm info syslog
L1-PMENGINE-4-TCA	The specified PM TCA has been declared	%L1-PMENGINE-4-TCA Port [chars] reports [chars] [chars]([chars]) PM TCA with current value [unsigned long long int], threshold [unsigned long long int] in current [chars] interval window	Layer1 PM TCA syslog
L2-SPA-3-POWER_FAILURE	SPA_OK and PWR_OK signals are asserted after the SPA is powered on by LC. These signals are deasserted when there is a power failure on the SPA and this failure indicates that it is an SPA hardware issue. The SPA is put into FAILED state.	%L2-SPA-3-POWER_FAILURE SPA_OK and PWR_OK signal is deasserted on subslot [unsigned int]	Layer2 SPA failure syslog
ROUTING-OSPF-5-ADJCHG	An OSPF routing neighbor has changed state. The message describes the change and the reason for it.	%ROUTING-OSPF-5-ADJCHG : Process 1, Nbr 2.2.2.2 on MgmtEth0/7/CPU0/2 in area 0 from FULL to DOWN, Loading Done,vrf default vrfid 0x60000000	OSPF routing neighbor down syslog
ROUTING-OSPF-5-ADJCHG	An OSPF routing neighbor has changed state. The message describes the change and the reason for it.	%ROUTING-OSPF-5-ADJCHG : Process 1, Nbr 2.2.2.2 on MgmtEth0/7/CPU0/2 in area 0 from LOADING to FULL, Loading Done,vrf default vrfid 0x60000000	OSPF routing neighbor up syslog
OSPFv3-5-ADJCHG-IPv6	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPFv3 neighbor down syslog
OSPFv3-5-ADJCHG-IPv6	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from LOADING to FULL, Neighbor Down: Interface down or detached	OSPFv3 neighbor up syslog
ROUTING-OSPFv3-5-ADJCHG	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%ROUTING-OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from FULL to DOWN, Neighbor Down: Interface down or detached	IPv6 OSPFv3 routing neighbor down syslog
ROUTING-OSPFv3-5-ADJCHG	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%ROUTING-OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from LOADING to FULL, Neighbor Down: Interface down or detached	IPv6 OSPFv3 routing neighbor up syslog
BGP-5-ADJCHANGE-IPv6	The IPv6 adjacent BGP neighbor was lost	%BGP-5-ADJCHANGE: neighbor 2001:210:10:1::2 Down User reset	IPv6 BGP neighbor down syslog
BGP-5-ADJCHANGE-IPv6	The IPv6 adjacent BGP neighbor was lost	%BGP-5-ADJCHANGE: neighbor 2001:210:10:1::2 Up User reset	IPv6 BGP neighbor up syslog
ROUTING-BGP-5-ADJCHANGE	The IPv6 adjacent BGP neighbor was lost	%ROUTING-BGP-5-ADJCHANGE : neighbor 3.3.3.3 down (VRF: default) %ROUTING-BGP-5-ADJCHANGE : neighbor 2001:210:10:1::1 Down - User clear requested	IPv6 Routing BGP neighbor down syslog
ROUTING-BGP-5-ADJCHANGE	The IPv6 adjacent BGP neighbor was lost	%ROUTING-BGP-5-ADJCHANGE : neighbor 3.3.3.3 Up (VRF: default) %ROUTING-BGP-5-ADJCHANGE : neighbor 2001:210:10:1::1 Up	IPv6 Routing BGP neighbor up syslog

Registry Parameters for Syslog Events

This section lists the event subtypes and registry parameters for the following syslog event types:

•power supply removed syslog

•Backup to Master syslog

•link down syslog

•dlci change syslog

•hsrp syslog

•snmp 5 snmp auth fail syslog

•memory allocation syslog

•process ran too long syslog

•registered timer expired syslog

•EIGRP router query to neighbors timeouted syslog

•ethernet cable is not connected syslog

•frmr report syslog

•dtp 5 non port trunk syslog

•line down syslog

•ipx 3 bad igrp sap syslog

•lance 5 coll syslog

•lance 5 late coll syslog

•sys 5 config i syslog

•at 6 node wrong syslog

•security 1 port shut down syslog

•span tree 2 rx port fast syslog

•Udld 3 disable syslog

•udld 3 disable fail syslog

•udld 4 one way path syslog

•ospf neighbor syslog

•span tree 2 loop guard block syslog

•amdp2 fe 5 coll syslog

•dec 21140-5 coll syslog

•ilacc 5 coll syslog

•pquicc 5 coll syslog

•pquicc ether 5 coll syslog

•pquicc fe 5 coll syslog

•quicc ether 5 coll syslog

•amdp2 fe 5 latecoll syslog

•is is neighbor down syslog

•dec 21140-5 late coll syslog

•ilacc 5 late coll syslog

•pquicc 5 late coll syslog

•pquicc ether 5 late coll syslog

•pquicc fe 5 late coll syslog

•quicc ether 5 late coll syslog

•snmp 5 link trap syslog

•snmp 5 top trap syslog

•dual5 neighbor change

•link down syslog

•bgp neighbor down syslog

•card out syslog

•oir sp 3 power cycle

•reloading device syslog

•system restart syslog

•dtp 5 non port trunk syslog

•isdn 6 connect syslog

•duplex mismatch

•isdn 6 connect syslog

•tdp neighbor down syslog

•ldp neighbor down syslog

•mpls te tunnel reoptimized syslog

•mpls te tunnel down syslog

•environment monitoring 2 supply syslog

•system sp restart syslog

•udld sp 4 disable syslog

•fabric sp 5 clear block off syslog

•c6kenv sp 4 fan tray fail

•pfredun sp 4 bootstring invalid

•power supply failure syslog

•pm sp stdby 4 err disable

•Hsrp syslog

•bgp notification syslog

•bgp notification syslog

•VSL link state change syslog

•VSL role mismatch resolved syslog

•env sp 4 fan tray failed syslog

•pwr sp 2 power supply fail

•bgp neighbor down syslog

•vrrp state changed syslog

•link down syslog

•line down syslog

•ospf neighbor syslog

•envmon powersupply syslog

•envmon condition syslog

•envmon fan syslog

•envmon temperature syslog

•card out syslog

•envmon powersupply syslog

•envmon temperature syslog

•envmon powersupply syslog

•fabric hardware syslog

•flash card removed syslog

•memory allocation syslog

•reset module syslog

•card down syslog

•card out syslog

•pim neighbor loss syslog

•pim interface down syslog

•pim invalid join syslog

•card down syslog

•line down syslog

•card out syslog

•ldp neighbor down syslog

•bgp neighbor down syslog

•Login authentication failed syslog

•if table in sync syslog

•bfd session down syslog

•layer 2 G709 alarm syslog

•layer2 dwdm info syslog

•layer1 PM TCA syslog

•layer2 SPA failure syslog

•ospf routing neighbor syslog

•ipv6 ospfv3 routing neighbor down syslog

•bfd rate limit high warning syslog

•rip authentication failed syslog

•rip configuration error syslog

•rip out of memory event syslog

power supply removed syslog

Table 12-4 Event Subtypes: power supply removed syslog 

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Power supply inserted syslog

power supply inserted syslog

inserted

N

IModule

F

F

F

0

F

clr

F

T

F

Power supply removed syslog

power supply removed syslog

removed

N

IModule

F

F

F

0

F

maj

T

T

F

Backup to Master syslog

Table 12-5 Event Subtypes: Backup to Master syslog 

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Backup to Master change syslog

Backup to Master syslog

Backup

N

IModule

F

F

F

0

F

info

T

T

F

Master to Backup change syslog

Master to Backup syslog

Master

N

IModule

F

F

F

0

F

info

T

T

F

link down syslog

Table 12-6 Event Subtypes: link down syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Link down syslog

link down syslog

ip interface oper status

IIPInterface

F

T

F

0

T

maj

F

T

T

Link up syslog

link up syslog

ip interface oper status

IIPInterface

F

F

F

0

F

clr

F

T

T

dlci change syslog

Table 12-7 Event Subtypes: dlci change syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

FR DLCI down syslog

dlci down

N

IPhysicalLayer

T

T

F

0

T

maj

F

T

F

FR DLCI up syslog

dlci up

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

hsrp syslog

Table 12-8 Event Subtypes: hsrp syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

HSRP group change syslog

hsrp group change syslog

hsrp

IIPInterface

F

T

F

0

T

info

F

T

F

HSRP group restored syslog

hsrp group restored syslog

hsrp

IIPInterface

F

F

F

0

F

clr

F

T

F

snmp 5 snmp auth fail syslog

Table 12-9 Event Subtypes: snmp 5 snmp auth fail syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

SNMP message has not properly authenticated

snmp 5 snmp auth fail syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

memory allocation syslog

Table 12-10 Event Subtypes: memory allocation syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Memory allocation is not available

memory allocation syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

process ran too long syslog

Table 12-11 Event Subtypes: process ran too long syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

process ran too long

process ran too long syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

registered timer expired syslog

Table 12-12 Event Subtypes: registered timer expired syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

registered timer is expired

registered timer expired syslog

N

IManagedElement

F

T

F

0

F

min

F

T

F

EIGRP router query to neighbors timeouted syslog

Table 12-13 Event Subtypes: EIGRP router query to neighbors timeouted syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

EIGRP router query to neighbors timeouted syslog

EIGRP router query to neighbors timeouted syslog

N

IManagedElement

T

T

F

0

T

info

F

T

F

ethernet cable is not connected syslog

Table 12-14 Event Subtypes: ethernet cable is not connected syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Ethernet cable is not connected

ethernet cable is not connected syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

frmr report syslog

Table 12-15 Event Subtypes: frmr report syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

frame with an invalid control code

frmr report syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

dtp 5 non port trunk syslog

Table 12-16 Event Subtypes: dtp 5 non port trunk syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Interface changed to non trunk

dtp 5 non port trunk syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

Interface changed to trunk

dtp 5 port trunk syslog

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

line down syslog

Table 12-17 Event Subtypes: line down syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Line down syslog

line down syslog

port-status

IIPInterface

F

T

F

0

T

maj

F

T

T

Line up syslog

line up syslog

port-status

IIPInterface

F

F

F

0

F

clr

F

T

T

ipx 3 bad igrp sap syslog

Table 12-18 Event Subtypes: ipx 3 bad igrp sap syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Cannot send incremental SAP update to peer

ipx 3 bad igrp sap syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

F

F

lance 5 coll syslog

Table 12-19 Event Subtypes: lance 5 coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

An Ethernet cable is broken or unterminated

lance 5 coll syslog

N

IManagedElement

F

T

F

0

T

info

F

T

F

lance 5 late coll syslog

Table 12-20 Event Subtypes: lance 5 late coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

An Ethernet transceiver is unplugged or defective

lance 5 late coll syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

sys 5 config i syslog

Table 12-21 Event Subtypes: sys 5 config i syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Device configuration changed

sys 5 config i syslog

N

IManagedElement

F

F

F

0

T

info

F

T

F

at 6 node wrong syslog

Table 12-22 Event Subtypes: at 6 node wrong syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

AppleTalk invalid network number

at 6 node wrong syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

security 1 port shut down syslog

Table 12-23 Event Subtypes: security 1 port shut down syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

security port shut down

security 1 port shut down syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

span tree 2 rx port fast syslog

Table 12-24 Event Subtypes: span tree 2 rx port fast syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

BPDU spanning-tree portfast enabled

span tree 2 rx port fast syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

Udld 3 disable syslog

Table 12-25 Event Subtypes: Udld 3 disable syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Fault has been detected in a fiber Ethernet port connection

udld 3 disable syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

udld 3 disable fail syslog

Table 12-26 Event Subtypes: udld 3 disable fail syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Unidirectional link detected

udld 3 disable fail syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

udld 4 one way path syslog

Table 12-27 Event Subtypes: udld 4 one way path syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Fault has been detected in a fiber Ethernet connection

udld 4 one way path syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

ospf neighbor syslog

Table 12-28 Event Subtypes: ospf neighbor syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

OSPF neighbor down syslog

ospf neighbor down syslog

N

IIPInterface

T

T

F

0

F

maj

F

T

F

OSPF neighbor up syslog

ospf neighbor up syslog

N

IIPInterface

F

F

F

0

F

clr

F

T

F

span tree 2 loop guard block syslog

Table 12-29 Event Subtypes: span tree 2 loop guard block syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

No BPDUs were received on port

span tree 2 loop guard block syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

BPDUs were received on port

span tree 2 loop guard un block syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

amdp2 fe 5 coll syslog

Table 12-30 Event Subtypes: amdp2 fe 5 coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Ethernet is seeing multiple collisions

amdp2 fe 5 coll syslog

N

IPhysicalLayer

F

T

F

0

T

info

F

T

F

dec 21140-5 coll syslog

Table 12-31 Event Subtypes: dec 21140-5 coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Fast Ethernet packet has been dropped

dec 21140-5 coll syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

ilacc 5 coll syslog

Table 12-32 Event Subtypes: ilacc 5 coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

An Ethernet cable is broken

ilacc 5 coll syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

pquicc 5 coll syslog

Table 12-33 Event Subtypes: pquicc 5 coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

pquicc 5 coll syslog: An Ethernet cable is broken

pquicc 5 coll syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

pquicc ether 5 coll syslog

Table 12-34 Event Subtypes: pquicc ether 5 coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

pquicc ether 5 coll syslog: An Ethernet cable is broken

pquicc ether 5 coll syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

pquicc fe 5 coll syslog

Table 12-35 Event Subtypes: pquicc fe 5 coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Ethernet is detecting multiple collisions

pquicc fe 5 coll syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

quicc ether 5 coll syslog

Table 12-36 Event Subtypes: quicc ether 5 coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

quicc ether 5 coll syslog: An Ethernet cable is broken

quicc ether 5 coll syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

amdp2 fe 5 latecoll syslog

Table 12-37 Event Subtypes: amdp2 fe 5 latecoll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Late collisions have occurred on the Ethernet or Fast Ethernet interface

amdp2 fe 5 latecoll syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

is is neighbor down syslog

Table 12-38 Event Subtypes: is is neighbor down syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

IS-IS neighbor down syslog

is is neighbor down syslog

N

IPhysicalLayer

F

T

F

0

F

maj

F

T

F

IS-IS neighbor up syslog

is is neighbor up syslog

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

dec 21140-5 late coll syslog

Table 12-39 Event Subtypes: dec 21140-5 late coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Late collisions have occurred

dec 21140-5 late coll syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

ilacc 5 late coll syslog

Table 12-40 Event Subtypes: ilacc 5 late coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

ilacc 5 late coll syslog: Late collisions have occurred

ilacc 5 late coll syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

pquicc 5 late coll syslog

Table 12-41 Event Subtypes: pquicc 5 late coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

pquicc 5 late coll syslog: Late collisions have occurred

pquicc 5 late coll syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

pquicc ether 5 late coll syslog

Table 12-42 Event Subtypes: pquicc ether 5 late coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

A new network may not have been engineered properly

pquicc ether 5 late coll syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

pquicc fe 5 late coll syslog

Table 12-43 Event Subtypes: pquicc fe 5 late coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

pquicc fe 5 late coll syslog: Late collisions have occurred

pquicc fe 5 late coll syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

quicc ether 5 late coll syslog

Table 12-44 Event Subtypes: quicc ether 5 late coll syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

quicc ether 5 late coll syslog: Late collisions have occurred

quicc ether 5 late coll syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

snmp 5 link trap syslog

Table 12-45 Event Subtypes: snmp 5 link trap syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Link trap down has occurred

snmp 5 link trap down syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

Link trap up has occurred

snmp 5 link trap up syslog

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

snmp 5 top trap syslog

Table 12-46 Event Subtypes: snmp 5 top trap syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

configured port changed state from learning to forwarding

snmp 5 top trap syslog

N

IManagedElement

F

T

F

0

T

min

F

T

F

dual5 neighbor change

Table 12-47 Event Subtypes: dual5 neighbor change  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

DUAL 5 neighbor down syslog

dual5 neighbor down

N

IPhysicalLayer

T

T

F

0

F

maj

F

T

F

DUAL 5 neighbor up syslog

dual5 neighbor up

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

link down syslog

Table 12-48 Event Subtypes: link down syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Link down syslog

link down syslog

ip interface oper status

IIPInterface

F

T

F

0

T

maj

F

T

T

Link up syslog

link up syslog

ip interface oper status

IIPInterface

F

F

F

0

F

clr

F

T

T

bgp neighbor down syslog

Table 12-49 Event Subtypes: bgp neighbor down syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

BGP neighbor down syslog

bgp neighbor down syslog

bgp neighbours

IMpBgpOid

T

T

F

0

T

maj

F

T

F

BGP neighbor up syslog

bgp neighbor up syslog

bgp neighbours

IMpBgpOid

F

F

F

0

F

clr

F

T

F

BGP neighbor down syslog

bgp neighbor down syslog

bgp neighbours

IMpBgpOid

T

T

F

0

T

maj

F

T

F

BGP neighbor up syslog

bgp neighbor up syslog

bgp neighbours

IMpBgpOid

F

F

F

0

F

clr

F

T

F

card out syslog

Table 12-50 Event Subtypes: card out syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

card in syslog

card in syslog

physical-command

IModule

F

F

F

0

F

clr

F

T

T

card out syslog

card out syslog

physical-command

IModule

F

T

F

0

T

maj

F

T

T

oir sp 3 power cycle

Table 12-51 Event Subtypes: oir sp 3 power cycle  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

oir sp 3 power cycle syslog

oir sp 3 power cycle

N

IModule

F

F

F

0

T

info

F

T

F

reloading device syslog

Table 12-52 Event Subtypes: reloading device syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Reloading device syslog

reloading device syslog

N

IManagedElement

F

F

T

0

F

info

T

T

T

system restart syslog

Table 12-53 Event Subtypes: system restart syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

System restart

system restart syslog

physical-command

IManagedElement

F

T

F

0

T

info

F

T

T

dtp 5 non port trunk syslog

Table 12-54 Event Subtypes: dtp 5 non port trunk syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Interface changed to non trunk

dtp 5 non port trunk syslog

N

IPhysicalLayer

F

T

F

0

T

min

F

T

F

Interface changed to trunk

dtp 5 port trunk syslog

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

isdn 6 connect syslog

Table 12-55 Event Subtypes: isdn 6 connect syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

ISDN connect syslog

isdn 6 connect syslog

N

IPhysicalLayer

F

T

F

0

T

maj

F

T

F

ISDN disconnect syslog

isdn 6 disconnect syslog

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

ISDN connect syslog

isdn 6 connect syslog

N

IPhysicalLayer

F

T

F

0

T

maj

F

T

F

ISDN disconnect syslog

isdn 6 disconnect syslog

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

duplex mismatch

Table 12-56 Event Subtypes: duplex mismatch  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Duplex mismatch discovered

duplex mismatch

N

IPhysicalLayer

F

T

F

0

T

info

F

T

F

isdn 6 connect syslog

Table 12-57 Event Subtypes: isdn 6 connect syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

ISDN connect syslog

isdn 6 connect syslog

N

IPhysicalLayer

F

T

F

0

T

maj

F

T

F

ISDN disconnect syslog

isdn 6 disconnect syslog

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

ISDN connect syslog

isdn 6 connect syslog

N

IPhysicalLayer

F

T

F

0

T

maj

F

T

F

ISDN disconnect syslog

isdn 6 disconnect syslog

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

tdp neighbor down syslog

Table 12-58 Event Subtypes: tdp neighbor down syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

TDP neighbor down syslog

tdp neighbor down syslog

label switching table

ILseOid

F

T

F

0

T

maj

F

T

F

TDP neighbor up syslog

tdp neighbor up syslog

label switching table

ILseOid

F

F

F

0

F

clr

F

T

F

ldp neighbor down syslog

Table 12-59 Event Subtypes: ldp neighbor down syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

LDP neighbor down syslog

ldp neighbor down syslog

mpls interfaces

ILseOid

F

T

F

0

T

maj

F

T

F

LDP neighbor up syslog

ldp neighbor up syslog

mpls interfaces

ILseOid

F

F

F

0

F

clr

F

T

F

mpls te tunnel reoptimized syslog

Table 12-60 Event Subtypes: mpls te tunnel reoptimized syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

MPSL-TE tunnel reoptimized/rerouted syslog

mpls te tunnel reoptimized syslog

N

IMplsTETunnel

T

T

F

0

T

info

F

T

F

mpls te tunnel down syslog

Table 12-61 Event Subtypes: mpls te tunnel down syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

MPLS-TE tunnel down syslog

mpls te tunnel down syslog

mpls traffic engineering tunnel information

IMplsTETunnel

F

T

F

0

T

maj

F

T

F

MPLS-TE tunnel up syslog

mpls te tunnel up syslog

mpls traffic engineering tunnel information

IMplsTETunnel

F

F

F

0

F

clr

F

T

F

MPLS-TE tunnel down syslog

mpls te tunnel down syslog

mpls traffic engineering tunnel information

IMplsTETunnel

F

T

F

0

T

maj

F

T

F

MPLS-TE tunnel up syslog

mpls te tunnel up syslog

mpls traffic engineering tunnel information

IMplsTETunnel

F

F

F

0

F

clr

F

T

F

environment monitoring 2 supply syslog

Table 12-62 Event Subtypes: environment monitoring 2 supply syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

A power supply is not working or has not been turned on

environment monitoring 2 supply

N

IManagedElement

F

T

F

0

T

info

F

T

F

system sp restart syslog

Table 12-63 Event Subtypes: system sp restart syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

System restart

system sp restart syslog

N

IManagedElement

F

T

F

0

T

info

F

T

F

udld sp 4 disable syslog

Table 12-64 Event Subtypes: udld sp 4 disable syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Aggressive Mode Failure Detected

udld sp 4 disable syslog

N

IPhysicalLayer

F

T

F

0

T

info

F

T

F

fabric sp 5 clear block off syslog

Table 12-65 Event Subtypes: fabric sp 5 clear block off syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

fabric sp 5 clear block down syslog

fabric sp 5 clear block off syslog

N

IPhysicalLayer

F

T

F

0

T

info

F

T

F

fabric sp 5 clear block up syslog

fabric sp 5 clear block on syslog

N

IPhysicalLayer

F

F

F

0

T

info

F

T

F

c6kenv sp 4 fan tray fail

Table 12-66 Event Subtypes: c6kenv sp 4 fan tray fail  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

c6kenv sp 4 fan tray fail syslog

c6kenv sp 4 fan tray fail

N

IManagedElement

F

F

F

0

T

info

F

T

F

pfredun sp 4 bootstring invalid

Table 12-67 Event Subtypes: pfredun sp 4 bootstring invalid  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

pfredun sp 4 bootstring invalid syslog

pfredun sp 4 bootstring invalid

N

IManagedElement

F

F

F

0

T

info

F

T

F

power supply failure syslog

Table 12-68 Event Subtypes: power supply failure syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Power supply failed syslog

power supply failed syslog

N

IPhysicalLayer

F

F

F

0

T

maj

F

T

F

Power supply okay syslog

power supply okay syslog

N

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

Redundant Power System Failed

redundant power system failed syslog

N

IPhysicalLayer

F

F

F

0

T

min

F

T

F

pm sp stdby 4 err disable

Table 12-69 Event Subtypes: pm sp stdby 4 err disable  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

pm sp stdby 4 err disable syslog

pm sp stdby 4 err disable

N

IPhysicalLayer

F

F

F

0

T

info

F

T

F

Hsrp syslog

Table 12-70 Event Subtypes: Hsrp syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

HSRP group change syslog

hsrp group change syslog

hsrp

IPhysicalLayer

F

T

F

0

T

info

F

T

F

HSRP group restored syslog

hsrp group restored syslog

hsrp

IPhysicalLayer

F

F

F

0

F

clr

F

T

F

bgp notification syslog

Table 12-71 Event Subtypes: bgp notification syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

BGP notification syslog

bgp notification syslog

N

IPhysicalLayer

T

T

F

0

T

info

F

T

T

bgp notification syslog

Table 12-72 Event Subtypes: bgp notification syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

new ethernet channel interface for VSL connection

VSL connection new interface

N

IManagedElement

F

T

F

0

T

info

T

T

F

VSL link state change syslog

Table 12-73 Event Subtypes: VSL link state change syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

VSL link up syslog

VSL link up syslog

N

IManagedElement

F

T

F

0

T

info

T

T

F

VSL link down syslog

VSL link down syslog

N

IManagedElement

F

T

F

0

T

info

T

T

F

VSL link up syslog: active switch is #1

VSL link up and switch #1 is active

N

IShelf

F

T

F

0

T

info

T

T

F

VSL link up syslog: active switch is #2

VSL link up and switch #2 is active

N

IShelf

F

T

F

0

T

info

T

T

F

VSL role mismatch resolved syslog

Table 12-74 Event Subtypes: VSL role mismatch resolved syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

role mismatch resolved syslog, sent from active switch #1

VSL role mismatch resolved sent from active switch #1

N

IShelf

F

T

F

0

T

info

T

T

F

role mismatch resolved syslog, sent from active switch #2

VSL role mismatch resolved sent from active switch #2

N

IShelf

F

T

F

0

T

info

T

T

F

env sp 4 fan tray failed syslog

Table 12-75 Event Subtypes: env sp 4 fan tray failed syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

env sp 4 fan tray fail syslog

env sp 4 fan tray fail

N

IManagedElement

F

F

F

0

T

info

F

T

F

pwr sp 2 power supply fail

Table 12-76 Event Subtypes: pwr sp 2 power supply fail  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

pwr sp 2 power supply fail syslog

pwr sp 2 power supply fail

N

IManagedElement

F

F

F

0

T

info

F

T

F

bgp neighbor down syslog

Table 12-77 Event Subtypes: bgp neighbor down syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

BGP neighbor down syslog

bgp neighbor down syslog

bgp neighbours, BFD

IMpBgpOid

T

T

F

0

T

maj

F

T

F

BGP neighbor up syslog

bgp neighbor up syslog

bgp neighbours, BFD

IMpBgpOid

F

F

F

0

F

clr

F

T

F

vrrp state changed syslog

Table 12-78 Event Subtypes: vrrp state changed syslog  

Short Description

Event Subtype

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

VRRP State Changed syslog

vrrp state changed syslog

N

IManagedElement

F

F

F

0

T

info

T

T

F

link down syslog

Table 12-79 Event Subtypes: link down syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Link down syslog

link down syslog

down / Down

ip interface oper status

IIPInterface

F

T

F

0

T

maj

F

T

T

Link up syslog

link up syslog

up / Up

ip interface oper status

IIPInterface

F

F

F

0

F

clr

F

T

T

Link down syslog

link down syslog

down / Down

ip interface oper status

IIPInterface

F

T

F

0

T

maj

F

T

T

Link up syslog

link up syslog

up / Up

ip interface oper status

IIPInterface

F

F

F

0

F

clr

F

T

T

line down syslog

Table 12-80 Event Subtypes: line down syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Line down syslog

line down syslog

down / Down

port-status

IPortLayer1

F

T

F

0

T

maj

F

T

T

Line up syslog

line up syslog

up / Up

port-status

IPortLayer1

F

F

F

0

F

clr

F

T

T

ospf neighbor syslog

Table 12-81 Event Subtypes: ospf neighbor syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

OSPF neighbor down syslog

ospf neighbor down syslog

Down

N

IIPInterface

T

T

F

0

F

maj

F

T

F

OSPF neighbor up syslog

ospf neighbor up syslog

Up / LOADING to FULL

N

IIPInterface

F

F

F

0

F

clr

F

T

F

envmon powersupply syslog

Table 12-82 Event Subtypes: envmon powersupply syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

envmon powersupply syslog

envmon powersupply syslog

N/A

N

IManagedElement

F

T

T

0

T

maj

F

T

F

envmon condition syslog

Table 12-83 Event Subtypes: envmon condition syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

envmon condition syslog

envmon condition syslog

ENV_CONDITION

N

IManagedElement

F

T

T

0

T

maj

F

T

F

envmon condition clear syslog

envmon condition clear syslog

ENV_CONDITION_CLEAR

N

IManagedElement

F

F

F

0

F

clr

F

T

F

envmon fan syslog

Table 12-84 Event Subtypes: envmon fan syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

envmon fan syslog

envmon fan syslog

FAN

N

IManagedElement

F

T

T

0

T

maj

F

T

F

envmon fan clear syslog

envmon fan clear syslog

FAN_CLEAR

N

IManagedElement

F

F

F

0

F

clr

F

T

F

envmon fan syslog

envmon fan syslog

NA

N

IManagedElement

F

T

T

0

T

maj

F

T

F

envmon temperature syslog

Table 12-85 Event Subtypes: envmon temperature syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

envmon tempretaure syslog

envmon temperature syslog

OVERTEMP

N

IManagedElement

F

T

T

0

T

maj

F

T

F

envmon tempretaure clear syslog

envmon temperature clear syslog

OVERTEMP_CLEAR

N

IManagedElement

F

F

F

0

F

clr

F

T

F

card out syslog

Table 12-86 Event Subtypes: card out syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

card out syslog

card out syslog

REMOVE

physical-command

IManagedElement

F

T

F

0

T

maj

F

T

T

card in syslog

card in syslog

INSERT

physical-command

IManagedElement

F

F

F

0

F

clr

F

T

T

envmon powersupply syslog

Table 12-87 Event Subtypes: envmon powersupply syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

envmon powersupply syslog

envmon powersupply syslog

POWERSUPPLY_CURRENT

N

IManagedElement

F

T

T

0

T

maj

F

T

F

envmon powersupply clear syslog

envmon powersupply clear syslog

POWERSUPPLY_CURRENT_CLEAR

N

IManagedElement

F

F

F

0

F

clr

F

T

F

envmon powersupply syslog

envmon powersupply syslog

POWERSUPPLY_NONOP

N

IManagedElement

F

T

T

0

T

maj

F

T

F

envmon powersupply clear syslog

envmon powersupply clear syslog

POWERSUPPLY_NONOP_CLEAR

N

IManagedElement

F

F

F

0

F

clr

F

T

F

envmon powersupply syslog

envmon powersupply syslog

POWERSUPPLY_VOLTAGE

N

IManagedElement

F

T

T

0

T

maj

F

T

F

envmon powersupply clear syslog

envmon powersupply clear syslog

POWERSUPPLY_VOLTAGE_CLEAR

N

IManagedElement

F

F

F

0

F

clr

F

T

F

envmon temperature syslog

Table 12-88 Event Subtypes: envmon temperature syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

envmon tempretaure syslog

envmon temperature syslog

TEMP

N

IManagedElement

F

T

T

0

T

maj

F

T

F

envmon tempretaure clear syslog

envmon temperature clear syslog

TEMP_CLEAR

N

IManagedElement

F

F

F

0

F

clr

F

T

F

envmon powersupply syslog

Table 12-89 Event Subtypes: envmon powersupply syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

envmon powersupply syslog

envmon powersupply syslog

VOLTAGE

N

IManagedElement

F

T

T

0

T

maj

F

T

F

envmon powersupply clear syslog

envmon powersupply clear syslog

VOLTAGE_CLEAR-

N

IManagedElement

F

F

F

0

F

clr

F

T

F

fabric hardware syslog

Table 12-90 Event Subtypes: fabric hardware syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

fabric hardware syslog

fabric hardware syslog

FIAHW_LOS

N

IManagedElement

F

T

T

0

T

maj

F

T

F

fabric hardware clear syslog

fabric hardware clear syslog

FIAHW_LOS_CLEAR

N

IManagedElement

F

F

F

0

F

clr

F

T

F

flash card removed syslog

Table 12-91 Event Subtypes: flash card removed syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

flash card removed syslog

flash card removed syslog

UNAVAILABLE

N

IManagedElement

F

T

T

0

F

maj

F

T

F

flash card inserted syslog

flash card inserted syslog

SWAPPED

N

Missing in Prospectus

F

F

F

0

F

clr

F

T

F

memory allocation syslog

Table 12-92 Event Subtypes: memory allocation syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Memory allocation is not available

memory allocation syslog

N/A

N

IManagedElement

F

T

F

0

T

min

F

T

F

reset module syslog

Table 12-93 Event Subtypes: reset module syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Module reset syslog

reset module syslog

N/A

N

IManagedElement

F

T

T

0

F

info

T

T

T

card down syslog

Table 12-94 Event Subtypes: card down syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Card oper status changed

card down syslog

UNPOWERED / DOWN / BRINGDOWN / NOT / DISABLED

card status

IModule

F

T

F

0

T

min

F

T

T

Card oper status changed

card up syslog

IOS XR RUN / OK

card status

IModule

F

F

F

0

F

clr

F

T

T

card out syslog

Table 12-95 Event Subtypes: card out syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

card out syslog

card out syslog

OIROUT

physical-command

IModule

F

T

F

0

T

maj

T

T

T

card in syslog

card in syslog

OIRIN

N

IModule

F

F

F

0

F

clr

F

T

T

card out syslog

card out syslog

OIROUT

physical-command

IModule

F

T

F

0

T

maj

T

T

T

card in syslog

card in syslog

OIRIN

N

IModule

F

F

F

0

F

clr

F

T

T

pim neighbor loss syslog

Table 12-96 Event Subtypes: pim neighbor loss syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

pim neighbor loss syslog

pim neighbor loss syslog

DOWN

N

IIPInterface

F

T

F

0

F

maj

F

T

F

pim neighbor up syslog

pim neighbor up syslog

UP

N

IIPInterface

F

F

F

0

F

clr

F

T

F

pim interface down syslog

Table 12-97 Event Subtypes: pim interface down syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

pim interface down syslog

pim interface down syslog

DOWN

N

IManagedElement

F

T

F

0

T

maj

F

T

F

pim interface up syslog

pim interface up syslog

UP

N

IManagedElement

F

F

F

0

F

clr

F

T

F

pim invalid join syslog

Table 12-98 Event Subtypes: pim invalid join syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

pim invalid join syslog

pim invalid join syslog

N/A

N

IManagedElement

F

T

F

0

T

min

F

T

F

card down syslog

Table 12-99 Event Subtypes: card down syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Card oper status changed

card down syslog

off

N

IManagedElement

F

T

F

0

T

min

F

T

T

Card oper status changed

card up syslog

on

N

IManagedElement

F

F

F

0

F

clr

F

T

T

line down syslog

Table 12-100 Event Subtypes: line down syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Line down syslog

line down syslog

N/A

N

IPortLayer1

F

T

F

0

T

maj

F

T

T

Line up syslog

line up syslog

cleared

N

IPortLayer1

F

F

F

0

F

clr

F

T

T

card out syslog

Table 12-101 Event Subtypes: card out syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

card out syslog

card out syslog

REMOVED

physical-command

IModule

F

T

F

0

T

maj

T

T

T

card in syslog

card in syslog

INSERTED

N

IModule

F

F

F

0

F

clr

F

T

T

ldp neighbor down syslog

Table 12-102 Event Subtypes: ldp neighbor down syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

LDP neighbor down syslog

ldp neighbor down syslog

DOWN

mpls interfaceslabel switching table mpls-ldp-peers

IProfileContainer (LSE)

F

T

F

0

T

maj

F

T

F

LDP neighbor up syslog

ldp neighbor up syslog

UP

mpls interfaceslabel switching tablempls-ldp-peers

IProfileContainer (LSE)

F

F

F

0

F

clr

F

T

F

bgp neighbor down syslog

Table 12-103 Event Subtypes: bgp neighbor down syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

BGP neighbor down syslog

bgp neighbor down syslog

down / Down

bgp neighbours

IBgpNeighbourEntry

F

T

F

0

T

maj

F

T

F

BGP neighbor up syslog

bgp neighbor up syslog

up / Up

bgp neighbours

IBgpNeighbourEntry

F

F

F

0

F

clr

F

T

F

Login authentication failed syslog

Table 12-104 Event Subtypes: Login authentication failed syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Login authentication failed syslog

login authentication failed syslog

NA

N

IManagedElement

F

F

F

0

F

min

T

T

F

if table in sync syslog

Table 12-105 Event Subtypes: if table in sync syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

If-Table in sync syslog

if table in sync syslog

N/A

physical-command

IModule

F

T

F

0

T

info

F

T

F

bfd session down syslog

Table 12-106 Event Subtypes: bfd session down syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

BFD neighbor down syslog

bfd session down syslog

down

bfd session

IBfdService

F

T

F

0

T

maj

F

T

F

BFD neighbor removed syslog

bfd session removed syslog

removed

bfd session

IBfdService

F

T

F

0

T

maj

F

T

F

BFD neighbor up syslog

bfd session up syslog

up

bfd session

IBfdService

F

T

F

0

T

clr

F

T

F

layer 2 G709 alarm syslog

Table 12-107 Event Subtypes: layer2 G709 alarm syslog  

Short Description	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
Layer2 G709 alarm syslog	layer2 G709 alarm syslog	NA	N	IManagedElement	F	T	F	0	T	wrn	F	T	F
Layer2 G709 clear syslog	layer2 G709 clear syslog	cleared	N	IManagedElement	F	F	F	0	F	clr	F	T	F

layer2 dwdm info syslog

Table 12-108 Event Subtypes: layer2 dwdm info syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Layer2 dwdm info syslog

layer2 dwdm info syslog

NA

N

IManagedElement

F

T

F

0

T

min

F

T

F

layer1 PM TCA syslog

Table 12-109 Event Subtypes: layer1 PM TCA syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Layer1 PM TCA syslog

layer1 PM TCA syslog

NA

N

IManagedElement

F

T

F

0

T

wrn

F

T

F

layer2 SPA failure syslog

Table 12-110 Event Subtypes: layer2 SPA failure syslog  

Short Description

Event Subtype

Subtype Value

Expedites Polling

Event Source (IMO Name)

Activate Flow

Correlate

Is Correlation Allowed

Weight

Auto Clear

Severity

Is Ticketable

Auto Remove

Flapping

Layer2 SPA failure syslog

layer2 SPA failure syslog

NA

N

IManagedElement

F

T

F

0

T

min

F

T

F

ospf routing neighbor syslog

Table 12-111 Event Subtypes: ospf routing neighbor syslog  

Short Description	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
OSPF routing neighbor down syslog	ospf routing neighbor down syslog	Down/DOWN	N	IManagedElement	F	T	F	0	F	maj	T	T	F
OSPF routing neighbor up syslog	ospf routing neighbor up syslog	Up / LOADING to FULL	N	IManagedElement	F	F	F	0	F	clr	F	T	F
OSPFv3 neighbor down syslog	ospfv3 neighbor down syslog	Down/DOWN	N	IManagedElement	T	T	F	0	F	maj	T	T	F
OSPFv3 neighbor up syslog	ospfv3 neighbor up syslog	Up / LOADING to FULL	N	IManagedElement	F	F	F	0	F	clr	F	T	F

ipv6 ospfv3 routing neighbor down syslog

Table 12-112 Event Subtypes: ipv6 ospfv3 routing neighbor down syslog  

Short Description	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
IPv6 OSPFv3 routing neighbor down syslog	ipv6 ospfv3 routing neighbor down syslog	Down/DOWN	N	IManagedElement	F	T	F	0	F	maj	T	T	F
IPv6 OSPFv3 routing neighbor up syslog	ipv6 ospfv3 routing neighbor up syslog	Up / LOADING to FULL	N	IManagedElement	F	F	F	0	F	clr	F	T	F
IPv6 BGP neighbor down syslog	ipv6 bgp neighbor down syslog	down / Down	N	IManagedElement	F	T	F	0	T	maj	F	T	F
IPv6 BGP neighbor up syslog	ipv6 bgp neighbor up syslog	up / Up	N	IManagedElement	F	F	F	0	F	clr	F	T	F
IPv6 Routing BGP neighbor down syslog	ipv6 routing bgp neighbor down syslog	down / Down	N	IManagedElement	F	T	F	0	T	maj	F	T	F
IPv6 Routing BGP neighbor up syslog	ipv6 routing bgp neighbor up syslog	up / Up	N	IManagedElement	F	F	F	0	F	clr	F	T	F

bfd rate limit high warning syslog

Table 12-113 Event Subtypes: bfd rate limit high warning syslog 

Short Description	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
BFD rate limit high warning syslog	bfd rate limit high warning syslog	N/A	N	IBfdService	F	F	F	0	T	wrn	F	T	F

rip authentication failed syslog

Table 12-114 Event Subtypes: rip authentication failed syslog 

Short Description	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
RIP authentication failed syslog	rip authentication failed syslog	N/A	N	IIPInterface	F	F	F	0	T	min	F	T	F

rip configuration error syslog

Table 12-115 Event Subtypes: rip configuration error syslog 

Short Description	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
RIP configuration error syslog	rip configuration error syslog	N/A	N	IManagedElement	F	F	F	0	T	min	F	T	F

rip out of memory event syslog

Table 12-116 Event Subtypes: rip out of memory event syslog  

Short Description	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
RIP out of memory event syslog	rip out of memory event syslog	N/A	N	IManagedElement	F	F	F	0	T	info	F	T	F