Table Of Contents

Syslogs

Cisco ASR 9000 Syslogs

Cisco IOS Syslogs

Cisco IOX Syslogs

Cisco ACE Syslogs

Cisco Nexus Syslogs

Cisco ASR 9000 Syslog Registry Parameters

Cisco IOS Syslog Registry Parameters

Cisco IOX Syslog Registry Parameters

Cisco ACE Syslog Registry Parameters

Cisco Nexus Syslog Registry Parameters

Syslogs

---

This chapter provides detailed information about the syslogs supported in Cisco ANA. Syslogs appear in the Cisco ANA EventVision Syslog tab. (For information about Cisco ANA EventVision, see the Cisco Active Network Abstraction 3.7.1 User Guide.) Syslog information is presented in two forms:

•Syslog Tables: A section devoted to the supported syslogs for each NOS platform (e.g., Cisco ASR 9000 Syslogs). Each of these sections contains a table listing the name of each supported syslog, along with a description, the raw format of the syslog string, and a short description. In the syslog tables in this Reference, each syslog's short description is also a link to its corresponding registry parameters.

•Registry Parameter Tables: A section devoted to the event types, event subtypes and Cisco ANA registry parameters for the supported syslogs. There is one parameter table for every syslog table (e.g., Cisco ASR 9000 Syslog Registry Parameters). Each syslog can have multiple event subtypes, or states. The parameter tables indicate when each state is generated, and how Cisco ANA processes them (such as their severity, whether they are ticketable, can be correlated, are autocleared, and so on).

Cisco ANA 3.7.1 users can enable an additional IP in the device for traps and syslogs. This new feature is called Multisource Events. When Cisco ANA 3.7.1 receives a trap or syslog from that device (from the new IP) it will still recognize the device. For more details on multisource events see Cisco ANA 3.7.1 Release notes.

This chapter includes the following sections:

•Cisco ASR 9000 Syslogs

•Cisco IOS Syslogs

•Cisco IOX Syslogs

•Cisco ACE Syslogs

•Cisco Nexus Syslogs

•Cisco ASR 9000 Syslog Registry Parameters

•Cisco IOS Syslog Registry Parameters

•Cisco IOX Syslog Registry Parameters

•Cisco ACE Syslog Registry Parameters

•Cisco Nexus Syslog Registry Parameters

Cisco ASR 9000 Syslogs

Table 43-1 lists the Cisco ASR 9000 Syslogs supported in Cisco ANA.

Table 43-1 Cisco ASR 9000 Syslogs 

Syslog Name	Description	Raw Format	Short Description
PLATFORM-PWRMON-4-OIR	handle power supply syslog	%PLATFORM-PWRMON-4-OIR : Power-module 0/PM0/SP inserted	Power supply inserted syslog
PLATFORM-PWRMON-4-OIR	handle power supply syslog	%PLATFORM-PWRMON-4-OIR : Power-module 0/PM0/SP removed	Power supply removed syslog
IP-VRRP-6-INFO_STATECHANGE	handle VRRP state change syslog	%IP-VRRP-6-INFO_STATECHANGE : GigabitEthernet0_5_0_1 vrid 10: state Backup -> Master	Backup to Master change syslog
IP-VRRP-6-INFO_STATECHANGE	handle VRRP state change syslog	%IP-VRRP-6-INFO_STATECHANGE : GigabitEthernet0_5_0_1 vrid 10: state Master -> Backup	Master to Backup change syslog
L2-BFD-4-RATE_LIMIT_WARNING_HIGH_WATERMARK	BFD rate limit high warning syslog	%L2-BFD-4-RATE_LIMIT_WARNING_HIGH_WATERMARK BFD PPS allocation exceeds 90 percent of maximum.	BFD rate limit high warning syslog
ROUTING-RIP-3-ERR_PAK_AUTH	RIP Authentication Failure syslog	%ROUTING-RIP-3-ERR_PAK_AUTH Authentication failure for RIP [chars] packet in context [chars]: instance [chars]: error equals [chars]	RIP authentication failed syslog
ROUTING-RIP-3-ERR_CFG	RIP configuration error syslog	%ROUTING-RIP-3-ERR_CFG Error during configuration in context [chars]: error equals [chars]	RIP configuration error syslog
ROUTING-RIP-6-INFO_OOM	RIP out of memory event syslog	%ROUTING-RIP-6-INFO_OOM RIP out-of-memory event [chars]: new/current state equals [chars]: old state equals [chars]	RIP out of memory event syslog
ROUTING-ISIS-5-ADJCHANGE	handle ROUTING-ISIS-5-ADJCHANGE syslog	RP/0/RSP1/CPU0:Oct 19 19:48:32.212 : isis[240]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to AGS2a (Bundle-Ether1) (L1) Down, Interface state down	routing ISIS neighbor down syslog
ROUTING-ISIS-5-ADJCHANGE	handle ROUTING-ISIS-5-ADJCHANGE syslog	RP/0/RSP1/CPU0:Oct 19 19:48:32.212 : isis[240]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to AGS2a (Bundle-Ether1) (L1) Up, Interface state up	routing ISIS neighbor up syslog
L2-ELO-6-INTF_REMOTE_LOOPBACK	Ethernet OAM Remote loopback session started/stopped syslog	%L2-ELO-6-INTF_REMOTE_LOOPBACK : TenGigE0/2/0/3: OAM remote loopback has been stopped on the interface	Ethernet OAM Remote loopback session stopped Syslog
L2-ELO-6-INTF_REMOTE_LOOPBACK	Ethernet OAM Remote loopback session started/stopped syslog	%L2-ELO-6-INTF_REMOTE_LOOPBACK : TenGigE0/2/0/3: OAM remote loopback has been started on the interface.	Ethernet OAM Remote loopback session started Syslog
L2-ELO-6-INTF_REMOTE_LOOPBACK	Ethernet OAM Remote loopback session started/stopped syslog	%L2-ELO-6-INTF_REMOTE_LOOPBACK : TenGigE0/2/0/3: OAM local loopback has been stopped on the interface.	Ethernet OAM Local loopback session stopped Syslog
L2-ELO-6-INTF_REMOTE_LOOPBACK	Ethernet OAM Remote loopback session started/stopped syslog	%L2-ELO-6-INTF_REMOTE_LOOPBACK : TenGigE0/2/0/3: OAM local loopback has been started on the interface	Ethernet OAM Local loopback session started Syslog
L2-ELO-6-INTF_SESSION_DOWN	Ethernet OAM session up/down syslog	%L2-ELO-6-INTF_SESSION_DOWN : TenGigE0/2/0/3: OAM session has gone down	Ethernet OAM Session down Syslog
L2-ELO-6-INTF_SESSION_DOWN	Ethernet OAM session up/down syslog	%L2-ELO-6-INTF_SESSION_UP : TenGigE0/2/0/3: OAM session has come up	Ethernet OAM Session up Syslog
L2-CFM-6-CC_ERROR	handle L2-CFM-6-CC_ERROR syslog	%L2-CFM-6-CC_ERROR : Peer MEP error change: error flags or remote interface state changed - domain ELAN, service elan10, local MEP ID 3991, local interface GigabitEthernet0/0/0/2.3010, peer MEP ID 3010, peer MAC address 001b.53ff.80d9, errors set: received CCM with RDI bit set; current: received CCM with RDI bit set;	CFM cc error syslog
L2-CFM-6-CC_ERROR	handle L2-CFM-6-CC_ERROR syslog	%L2-CFM-6-CC_ERROR : Peer MEP error change: error flags or remote interface state changed - domain ELAN, service elan10, local MEP ID 3991, local interface GigabitEthernet0/0/0/2.3010, peer MEP ID 3010, peer MAC address 001b.53ff.80d9, errors cleared: received CCM with RDI bit set; current: none	CFM cc error cleared syslog

Cisco IOS Syslogs

Table 43-2 lists the Cisco IOS syslogs supported in Cisco ANA.

If SNMP syslogs are disabled in a device, wrapped syslogs are enabled by Cisco ANA 3.7.1.Wrapped syslogs are SNMP traps that enclose the syslog information. For more details on wrapped syslogs, see Cisco ANA 3.7.1 Release notes.

Table 43-2 Cisco IOS Syslogs 

Syslog Name	Description	Raw Format	Short Description
LINK-5-CHANGED	handle link down syslog	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively up	Link down syslog
LINK-5-CHANGED	handle link down syslog	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively down	Link up syslog
FR-5-DLCICHANGE	handle dlci change syslog	%FR-5-DLCICHANGE: Interface Serial3/0/0:1 - DLCI 105 state changed to INACTIVE	FR DLCI down syslog
FR-5-DLCICHANGE	handle dlci change syslog	%FR-5-DLCICHANGE: Interface Serial3/0/0:1 - DLCI 105 state changed to ACTIVE	FR DLCI up syslog
STANDBY-6-STATECHANGE	handle hsrp syslog	%STANDBY-6-STATECHANGE: Standby: 1: Ethernet1 state Active -> Standby	HSRP group change syslog
STANDBY-6-STATECHANGE	handle hsrp syslog	%STANDBY-6-STATECHANGE: Standby: 1: Ethernet1 state Active -> Speak	HSRP group restored syslog
SNMP-5-SNMPAUTHFAIL	This message indicates that the switch has received an SNMP message that was not properly authenticated	%SNMP-5-SNMPAUTHFAIL: Authentication failed for message from 192.168.1.2	SNMP message has not properly authenticated
SYS-2-MALLOCFAIL	The requested memory allocation is not available from the specified memory pool	%SYS-2-MALLOCFAIL: Memory allocation of 1028 bytes failed from 0x6015EC84, Pool Processor, alignment 0	Memory allocation is not available
SYS-3-CPUHOG	The indicated process ran too long without relinquishing the processor	%SYS-3-CPUHOG: Task ran for 2148 msec (20/13), Process = IP Input, PC = 3199482 -Traceback= 314B5E6 319948A	process ran too long
SCHED-3-STUCKMTMR	A process can register to be notified when various events occur in the router. This message indicates that a registered timer is expired and its value is unchanged after the process has executed two successive times	%SCHED-3-STUCKMTMR: Sleep with expired managed timer 1C7410, time 0x1063F9C52 (00:00:00 ago).	registered timer is expired
DUAL-3-SIA	The EIGRP router hasn't received a reply to a query from one or more neighbors within the time allotted, so it clears the neighbors that didn't send a reply	%DUAL-3-SIA: Route 10.1.2.0/24 stuck-in-active state in IP-EIGRP 1. Cleaning up	EIGRP router query to neighbors timeouted syslog
LANCE-3-BADCABLE	The Ethernet cable is not connected	%LANCE-3-BADCABLE: msgtxt_badcable	Ethernet cable is not connected
LAPB-4-CTRLBAD	A received FRMR has reported a frame with an invalid control code	%LAPB-4-CTRLBAD: Interface Ethernet0, Invalid control field	frame with an invalid control code
DTP-5-NONTRUNKPORTON	The interface changed to non trunk	%DTP-5- ONTRUNKPORTON:Port 8/1 has become trunk	Interface changed to non trunk
LINEPROTO-5-UPDOWN	handle line syslog	%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to down	Line down syslog
LINEPROTO-5-UPDOWN	handle line syslog	%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up	Line up syslog
IPX-3-BADIGRPSAP	A hardware or software error occurred	%IPX-3-BADIGRPSAP: Cannot send incremental SAP update to peer on interface Ethernet0. Increasing output-sap-delay may help	Cannot send incremental SAP update to peer
LANCE-5-COLL	An Ethernet cable is broken or unterminated, or the transceiver is unplugged	%LANCE-5-COLL: Unit 1, excessive collisions. TDR=10	An Ethernet cable is broken or unterminated
LANCE-5-LATECOLL	An Ethernet transceiver is unplugged or defective	%LANCE-5-LATECOLL: Unit 1, late collision error	An Ethernet transceiver is unplugged or defective
SYS-5-CONFIG_I	The router's configuration was changed	%SYS-5-CONFIG_I: Configured from console by console	Device configuration changed
AT-6-NODEWRONG	An AppleTalk node sent a GetNet Info request to this router specifying an invalid network number for the source of the GetNet Info request	%AT-6-NODEWRONG: XX: AppleTalk node 192.168.2.0 misconfigured; reply has been broadcast	AppleTalk invalid network number
SECURITY-1-PORTSHUTDOWN	This message indicates that a port has been shut down due to an insecure host sourcing a packet into that port	%Security-1-PORTSHUTDOWN: Port 0/1 shutdown due to security violation	security port shut down
SPANTREE-2-RX_PORTFAST	A BPDU that has spanning-tree portfast enabled was received on the specified interface	%SPANTREE-2-RX_PORTFAST:Received BPDU on PortFast enabled port. Disabling 2/1	BPDU spanning-tree portfast enabled
UDLD-3-DISABLE	This message indicates that a fault has been detected in a fiber Ethernet port connection and that the port has been disabled to prevent other protocols from malfunctioning	%UDLD-3-DISABLE: Unidirectional link detected on port 1/2. Port disabled	Fault has been detected in a fiber Ethernet port connection
UDLD-3-DISABLEFAIL	This message indicates that a fault was detected in the wiring on a fiber Ethernet port, but UDLD could not disable the port	%UDLD-3-DISABLEFAIL: Unidirectional link detected on port 1/2, failed to disable port	Unidirectional link detected
UDLD-4-ONEWAYPATH	This message indicates that a fault has been detected in a fiber Ethernet connection in a shared media environment and that the connection may cause a possible malfunction	%UDLD-4-ONEWAYPATH: A unidirectional link from port 1/2 to port 1/2 of device abc was detected	Fault has been detected in a fiber Ethernet connection
OSPF-5-ADJCHG	handle ospf syslog	%OSPF-5-ADJCHG: Process 1, Nbr 10.100.12.6 on FastEthernet1/0 from Up to DOWN, Loading Done	OSPF neighbor down syslog
OSPF-5-ADJCHG	handle ospf syslog	%OSPF-5-ADJCHG: Process 1, Nbr 10.100.12.6 on FastEthernet1/0 from LOADING to FULL, Loading Done	OSPF neighbor up syslog
SPANTREE-2-LOOPGUARDBLOCK	When the loop guard blocks an inconsistent port, the following message is logged	%SPANTREE-2-LOOPGUARDBLOCK: No BPDUs were received on port 3/2 in vlan 3. Moved to loop-inconsistent state	No BPDUs were received on port
SPANTREE-2-LOOPGUARDUNBLOCK	After the recovery, the following message is logged	%SPANTREE-2-LOOPGUARDUNBLOCK: port 3/2 restored in vlan 3	BPDUs were received on port
AMDP2_FE-5-COLL	Ethernet or Fast Ethernet is seeing multiple collisions. This problem may occur under heavy loads	%AMDP2_FE-5-COLL: AMDP2/FE Ethernet1/1, Excessive collisions, TDR=1, TRC=1	Ethernet is seeing multiple collisions
DEC21140-5-COLL	A Fast Ethernet packet has been dropped because too many attempts to transmit it were stopped by collisions	%DEC21140-5-COLL: unit 0, excessive collisions	Fast Ethernet packet has been dropped
ILACC-5-COLL	An Ethernet cable is broken or is not terminated, or the transceiver is unplugged	%ILACC-5-COLL: Unit 0, excessive collisions. TDR=0.12	An Ethernet cable is broken
PQUICC-5-COLL	PQUICC-5-COLL : An Ethernet cable is broken or is not terminated	%PQUICC-5-COLL: Unit 1, excessive collisions. Retry limit 12 exceeded	pquicc 5 coll syslog: An Ethernet cable is broken
PQUICC_ETHER-5-COLL	PQUICC_ETHER-5-COLL : An Ethernet cable is broken or is not terminated	%PQUICC_ETHER-5-COLL: Unit 1, excessive collisions. Retry limit 2 exceeded	pquicc ether 5 coll syslog: An Ethernet cable is broken
PQUICC_FE-5-COLL	Ethernet or Fast Ethernet is detecting multiple collisions	%PQUICC_FE-5-COLL: PQUICC/FE(0/1), Excessive collisions, TDR=10, TRC=10.	Ethernet is detecting multiple collisions
QUICC_ETHER-5-COLL	An Ethernet cable is broken or unterminated	%PQUICC_ETHER-5-COLL: Unit 1, excessive collisions. Retry limit 2 exceeded	quicc ether 5 coll syslog: An Ethernet cable is broken
AMDP2_FE-5-LATECOLL	Late collisions have occurred on the Ethernet or Fast Ethernet	%AMDP2_FE-5-LATECOLL: Ethernet1/1 transmit error	Late collisions have occurred
CLNS-5-ADJCHANGE	handle isis syslog	%CLNS-5-ADJCHANGE: ISIS: Adjacency to edge-02(POS0/0) Down, hold time expired	IS-IS neighbor down syslog
CLNS-5-ADJCHANGE	handle isis syslog	%CLNS-5-ADJCHANGE: ISIS: Adjacency to edge-02(POS0/0) Up, hold time expired	IS-IS neighbor up syslog
DEC21140-5-LATECOLL	Late collisions are collisions that occur after transmitting the preamble	%DEC21140-5-LATECOLL: FastEthernet0/0 transmit error	Late collisions have occurred
ILACC-5-LATECOLL	An Ethernet transceiver is malfunctioning, the Ethernet is overloaded, or the Ethernet cable is too long	%ILACC-5-LATECOLL: Unit 0, late collision error	ilacc 5 late coll syslog: Late collisions have occurred
PQUICC-5-LATECOLL	pquicc 5 late coll syslog	%PQUICC-5-LATECOLL: Unit 1, late collision error	pquicc 5 late coll syslog: Late collisions have occurred
PQUICC_ETHER-5-LATECOLL	PQUICC_ETHER-5-LATECOLL : A new network may not have been engineered properly or adding a regenerator to an existing network may have changed the network specifications	%PQUICC_ETHER-5-LATECOLL: Unit 0, late collision error	A new network may not have been engineered properly
PQUICC_FE-5-LATECOLL	Late collisions have occurred on the Ethernet or Fast Ethernet interface	%PQUICC_FE-5-LATECOLL: PQUICC/FE(0/1), Late collision	pquicc fe 5 late coll syslog: Late collisions have occurred
QUICC_ETHER-5-LATECOLL	QUICC_ETHER-5-LATECOLL : A software or hardware error occurred	%QUICC_ETHER-5-LATECOLL: Unit 0, late collision error	quicc ether 5 late coll syslog: Late collisions have occurred
SNMP-5-LINKTRAP	This message indicates the type of Link Trap	%SNMP-5-LINKTRAP: Link down Trap -- ifName=sc0	Link trap down has occurred
SNMP-5-LINKTRAP	This message indicates the type of Link Trap	%SNMP-5-LINKTRAP: Link up Trap -- ifName=sc0	Link trap up has occurred
SNMP-5-TOPOTRAP	his message indicates that a configured port changed from the learning state to the forwarding state, or from the forwarding state to the blocking state	%SNMP-5-TOPOTRAP: Topology Change Trap for VLAN 1	configured port changed state from learning to forwarding
DUAL-5-NBRCHANGE	handle eigrp syslog	%DUAL-5-NBRCHANGE: IP-EIGRP 1: Neighbor 10.1.4.3 (Serial0) is down: stuck in active	DUAL 5 neighbor down syslog
DUAL-5-NBRCHANGE	handle eigrp syslog	%DUAL-5-NBRCHANGE: IP-EIGRP 1: Neighbor 10.1.4.3 (Serial0) is up: stuck in active	DUAL 5 neighbor up syslog
LINK-3-UPDOWN	handle link down syslog	%LINK-3-UPDOWN: Interface ATM2/0, changed state to down	Link down syslog
LINK-3-UPDOWN	handle link down syslog	%LINK-3-UPDOWN: Interface ATM2/0, changed state to up	Link up syslog
BGP-5-ADJCHANGE-vrf	handle BGP 5 syslog from vrf. make sure it is before the "BGP-5-ADJCHANGE" pattern	%BGP-5-ADJCHANGE: neighbor 10.1.2.3 vpn vrf inet Down	BGP neighbor down syslog
BGP-5-ADJCHANGE-vrf	handle BGP 5 syslog from vrf. make sure it is before the "BGP-5-ADJCHANGE" pattern	%BGP-5-ADJCHANGE: neighbor 10.1.2.3 vpn vrf inet Up	BGP neighbor up syslog
BGP-5-ADJCHANGE	handle BGP 5 syslog	%BGP-5-ADJCHANGE: neighbor 161.10.11.1 Down	BGP neighbor down syslog
BGP-5-ADJCHANGE	handle BGP 5 syslog	%BGP-5-ADJCHANGE: neighbor 161.10.11.1 Up	BGP neighbor up syslog
OIR-6-(REM|INS)CARD	handle module out syslog	%OIR-6-INSCARD: Card inserted from slot 4, interfaces disabled	card in syslog
OIR-6-(REM|INS)CARD	handle module out syslog	%OIR-6-REMCARD: Card removed from slot 4, interfaces disabled	card out syslog
OIR-SP-3-PWRCYCLE	card being power cycled	%OIR-SP-3-PWRCYCLE: Card in module x, is being power-cycled off (Module not responding to Keep Alive polling)	oir sp 3 power cycle syslog
SYS-5-RELOAD	syslog for reloading the device	%SYS-5-RELOAD: Reload requested	Reloading device syslog
SYS-5-RESTART	syslog for restarting the device	%SYS-5-RESTART: System restarted --	System restart
DTP-5-TRUNKPORTON	The interface returned to be a trunk	%DTP-5-TRUNKPORTON:Port 7/2 has become interface trunk	Interface changed to non trunk
DTP-5-TRUNKPORTON	The interface returned to be a trunk	%DTP-5-TRUNKPORTON:Port 7/2 has become dot1q trunk	Interface changed to trunk
ISDN-6-CONNECT	handle ISDN connect syslog	%ISDN-6-CONNECT: Interface BRI0/0:1 is now connected to 5772223	ISDN connect syslog
ISDN-6-CONNECT	handle ISDN connect syslog	%ISDN-6-CONNECT: Interface BRI0/0:1 is now connected to 5772223	ISDN disconnect syslog
ISDN-6-DISCONNECT	handle ISDN connect syslog	%ISDN-6-DISCONNECT: Interface BRI0:1? disconnected from 8130 traxbol, call lasted 60 seconds	ISDN connect syslog
ISDN-6-DISCONNECT	handle ISDN connect syslog	%ISDN-6-DISCONNECT: Interface BRI0:1? disconnected from 8130 traxbol, call lasted 60 seconds	ISDN disconnect syslog
CDP-4-DUPLEX_MISMATCH	This messages indicates a duplex mismatch problem (IOS)	%CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet6/2 (not half duplex), with TBA04251336 3/2 (half duplex)	Duplex mismatch discovered
ISDN-6-CONNECT-2	handle ISDN connect syslog2	%ISDN-6-LAYER2UP: Layer 2 for Interface FastEthernet2/1, TEI 0 changed to up	ISDN connect syslog
ISDN-6-CONNECT-2	handle ISDN connect syslog2	%ISDN-6-DISCONNECT: Interface FastEthernet0/1 disconnected from 71017 , call lasted 22 seconds	ISDN disconnect syslog
ISDN-6-DISCONNECT-2	handle ISDN disconnect syslog2	%ISDN-6-LAYER2UP: Layer 2 for Interface FastEthernet2/1, TEI 0 changed to up	ISDN connect syslog
ISDN-6-DISCONNECT-2	handle ISDN disconnect syslog2	%ISDN-6-LAYER2DOWN: Layer 2 for Interface FastEthernet0/1, TEI 0 changed to down	ISDN disconnect syslog
LDP-5-NBRCHG-TDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: TDP Neighbor 10.12.12.12:0 is DOWN (TCP connection closed by peer)	TDP neighbor down syslog
LDP-5-NBRCHG-TDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: TDP Neighbor 10.12.12.12:0 is UP (TCP connection closed by peer)	TDP neighbor up syslog
LDP-5-NBRCHG-LDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: LDP Neighbor 10.12.12.12:0 is DOWN	LDP neighbor down syslog
LDP-5-NBRCHG-LDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: LDP Neighbor 10.12.12.12:0 is UP	LDP neighbor up syslog
MPLS_TE-5-TUN_reoptimize	handle tunnel reoptimization syslog	%MPLS_TE-5-TUN: Tun1002: installed LSP 1002_33 (popt 10) for 1002_32 (popt 20), reopt. LSP is up	MPSL-TE tunnel reoptimized/rerouted syslog
MPLS_TE-5-TUN_up	handle tunnel up syslog	%MPLS_TE-5-TUN: Tun0: installed LSP 0_26 (popt 5) for nil, got 1st feasible path opt	MPLS TE tunnel down syslog
MPLS_TE-5-TUN_up	handle tunnel up syslog	%MPLS_TE-5-TUN: Tun0: installed LSP 0_26 (popt 5) for nil, got 1st feasible path opt	MPLS TE tunnel up syslog
MPLS_TE-5-TUN_down	handle tunnel down syslog	%MPLS_TE-5-TUN: Tun1001: installed LSP nil for 1001_92 (popt 1), path verification failed	MPLS TE tunnel down syslog
MPLS_TE-5-TUN_down	handle tunnel down syslog	%MPLS_TE-5-TUN: Tun1001: installed LSP nil for 1001_92 (popt 1), path verification failed	MPLS TE tunnel up syslog
ENV_MON-2-SUPPLY	Power supply is not working or has not been turned on	%ENV_MON-2-SUPPLY : [chars] Power Supply is Operation or Non-Operational	A power supply is not working or has not been turned on
SYS-SP-STDBY-5-RESTART	restarting the device	%SYS-SP-STDBY-5-RESTART: System restarted -- Cisco IOS Software (c7600s72033-ADVENTERPRISEK9_WAN_MZ), Version 12.2 Copyright (c) 1986-2006 by Cisco Systems, Inc.Compiled Thu 26-Oct-06 03:49 by	System restart
UDLD-SP-4-UDLD_PORT_DISABLED	aggressive mode failure detected	%UDLD-SP-4-UDLD_PORT_DISABLED: UDLD disabled interface FastEthernet2/1, FastEthernet2/1	Aggressive Mode Failure Detected
FABRIC-SP-5-FABRIC_MODULE_BACKUP	clear block option	%FABRIC-SP-5-FABRIC_MODULE_BACKUP: The Switch Fabric Module in slot 6 became standby	fabric sp 5 clear block down syslog
FABRIC-SP-5-FABRIC_MODULE_BACKUP	clear block option	%FABRIC-SP-5-FABRIC_MODULE_BACKUP: The Switch Fabric Module in slot 6 became standby	fabric sp 5 clear block up syslog
C6KENV-SP-4-FANTRAYFAILED	fan tray failed	%C6KENV-SP-4-FANTRAYFAILED: fan tray 2 failed	c6kenv sp 4 fan tray fail syslog
PFREDUN-SP-4-BOOTSTRING_INVALID	bootstring invalid	PFREDUN-SP-4-BOOTSTRING_INVALID: The bootfile slavebootflash:image_name is not present in standby	pfredun sp 4 bootstring invalid syslog
SYS-5-POWER-SUPPLY	Power supply failure notification	Power supply [dec] failed	Power supply failed syslog
SYS-5-POWER-SUPPLY	Power supply failure notification	Power supply [dec] okay	Power supply okay syslog
PM-SP-STDBY-4-ERR_DISABLE	err disable state	%PM-SP-STDBY-4-ERR_DISABLE: bpduguard error detected on Gi2/5, putting Gi2/5 in err-disable state	pm sp stdby 4 err disable syslog
HSRP-6-STATECHANGE	handle hsrp syslog	%HSRP-6-STATECHANGE:FastEthernet0/0 Grp 1 state Init	HSRP group change syslog
HSRP-6-STATECHANGE	handle hsrp syslog	%HSRP-6-STATECHANGE:FastEthernet0/0 Grp 1 state Standby	HSRP group restored syslog
BGP-3-NOTIFICATION	handle BGP 3 syslog	%BGP-3-NOTIFICATION: sent to neighbor 10.10.10.254 4/0 (hold time expired) 0 bytes	BGP notification syslog
NEW-INTERFACE-FOR-VSL-CONNECTION	new interface for the VSL connection syslog (one of the ether channel interfaces)	%VSL-5-VSL_CNTRL_LINK: New VSL Control Link 8/4	new ethernet channel interface for VSL connection
VSL-LINK-UP	VSL link up syslog	%VSLP-5-VSL_UP: Ready for Role Resolution with Switch=1, MAC=0014.1bc6.1c00 over 8/4	VSL link up syslog
VSL-LINK-DOWN	VSL link down syslog	%VSLP-SW1_SP-2-VSL_DOWN: Last VSL interface Te1/6/4 went down	VSL link down syslog
VSL-LINK-UP	VSL link up syslog and active switch is #1	%VSLP-SW1_SP-5-VSL_UP: Ready for Role Resolution with Switch=2, MAC=0013a.30e1.6800 over Te1/5/5	VSL link up syslog: active switch is #1
VSL-LINK-UP	VSL link up syslog and active switch is #2	%VSLP-SW2_SP-5-VSL_UP: Ready for Role Resolution with Switch=2, MAC=0013a.30e1.6800 over Te1/5/5	VSL link up syslog: active switch is #2
VSL-ROLE-MISMATCH-RESOLVED	role mismatch resolved syslog, sent from active switch #1	%VSLP-SW1_SP-5-RRP_ROLE_RESOLVED: Role resolved as ACTIVE by VSLP	role mismatch resolved syslog, sent from active switch #1
VSL-ROLE-MISMATCH-RESOLVED	role mismatch resolved syslog, sent from active switch #2	%VSLP-SW2_SP-5-RRP_ROLE_RESOLVED: Role resolved as ACTIVE by VSLP	role mismatch resolved syslog, sent from active switch #2
ENV-SP-4-FANTRAYFAILED	fan tray failed	%C7600_ENV-SP-4-FANTRAYFAILED: fan tray 2 failed	env sp 4 fan tray fail syslog
PWR-SP-2-PSFAIL	power supply failed	%C7600_PWR-SP-2-PSFAIL: power supply 1 output failed.	pwr sp 2 power supply fail syslog
BGP-5-ADJCHANGE-bfd	handle BGP 5 syslogs for BFD	%BGP-5-ADJCHANGE: neighbor 192.168.20.1 Down BFD adjacency down	BGP neighbor down syslog
BGP-5-ADJCHANGE-bfd	handle BGP 5 syslogs for BFD	%BGP-5-ADJCHANGE: neighbor 192.168.20.1 UP BFD adjacency up	BGP neighbor up syslog
VRRP-6-STATECHANGE	Virtual Router Redundancy Protocol (VRRP) message: The VRRP router has changed state.	%VRRP-6-STATECHANGE: Fa0/1 Grp 1 state Backup -> Master	VRRP State Changed syslog
ATM_AIM-5-ACTIVE_LINK_(DOWN|UP)	The specified link in the specified IMA group has become inactive/active	%ATM_AIM-5-ACTIVE_LINK_DOWN: Interface ATM1/0 of IMA Group ATM0/IMA2 is now inactive	Ima Link Status Change Down Syslog
ATM_AIM-5-ACTIVE_LINK_(DOWN|UP)	The specified link in the specified IMA group has become inactive/active	%ATM_AIM-5-ACTIVE_LINK_UP: Interface ATM1/0 of IMA Group ATM0/IMA2 is now active	Ima Link Status Change Up Syslog
ATM_AIM-5-ACTIVE_LINK_CHANGE	Active links were added to or removed from the group, changing the bandwidth of the group	%ATM_AIM-5-ACTIVE_LINK_CHANGE : IMA Group ATM3/1/ima0 now has 2 active links	IMA Active Link Change Syslog
CDP-4-NATIVE_VLAN_MISMATCH	Native VLAN mismatch discovered	%CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet1/1 (12), with 3750E-24TD-AGG3 FastEthernet0/2 (1)	Native VLAN mismatch discovered
TOP_MODULE-6-CLK_STATUS_CHANGE	Clock status change	Mar 19 15:26:54.371: %TOP_MODULE-6-CLK_STATUS_CHANGE: PLL clock changed to LOCKED	Clock status change syslog
TOP_MODULE-6-CLK_SOURCE_CHANGE	Clock source change	Mar 19 15:15:40.523: %TOP_MODULE-6-CLK_SOURCE_CHANGE: Changing clock reference source to Seconary TDM 8KHZ	Clock source change syslog
L2-L2VPN_PW-3-UPDOWN	The L2VPN Pseudowire went down	%L2-L2VPN_PW-3-UPDOWN : Pseudowire with address 2.2.2.2, id 140, state is Down	pseudo wire tunnel down syslog
L2-L2VPN_PW-3-UPDOWN	The L2VPN Pseudowire went up	%L2-L2VPN_PW-3-UPDOWN : Pseudowire with address 2.2.2.2, id 140, state is Up	pseudo wire tunnel up syslog
ETHER_SERVICE-6-ERR_DISABLED	Service instance shutdown due to errdisable.	%ETHER_SERVICE-6-ERR_DISABLED: Mac security violation - shutdown service instance 900 on interface GigabitEthernet10/0/12	EFP service error disabled syslog
ETHER_SERVICE-6-UPDOWN	Service instance shutdown Syslog	%ETHER_SERVICE-6-UPDOWN: Service instance 111 on interface GigabitEthernet10/0/3 changed to down	EFP down syslog
ETHER_SERVICE-6-UPDOWN	Service instance up Syslog	%ETHER_SERVICE-6-UPDOWN: Service instance 111 on interface GigabitEthernet10/0/3 changed to up	EFP up syslog
REP-SP-4-LINKSTATUS	The Resilient Ethernet Protocol (REP) link status has changed.	<188>950: *Aug 28 05:07:26.987: %REP-SP-4-LINKSTATUS: GigabitEthernet5/11 (segment 1) is non-operational due to neighbor not responding	REP link not operational syslog
REP-SP-4-LINKSTATUS	The Resilient Ethernet Protocol (REP) link status has changed.	<188>949:*Aug 28 05:04:40.690: %REP-SP-4-LINKSTATUS: GigabitEthernet5/11 (segment 1) is operational	REP link operational syslog
OSPFv3-5-ADJCHG	An OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPFv3 neighbor down syslog
OSPFv3-5-ADJCHG	An OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from LOADING to FULL, Neighbor Down: Interface down or detached	OSPFv3 neighbor up syslog
ETHER_CFM-6-ENTER_AIS	handle CFM AIS defect syslog	%ETHER_CFM-6-ENTER_AIS: local mep with mpid 101 level 4 id 7 dir I Interface Ethernet0/0 enters AIS defect condition	CFM enter AIS defect syslog
ETHER_CFM-6-EXIT_AIS	handle CFM AIS defect syslog	%ETHER_CFM-6-EXIT_AIS: local mep with mpid 101 level 4 id 7 dir I Interface Ethernet0/0 enters AIS defect condition	CFM exit AIS defect syslog
E_CFM-6-ENTER_AIS	handle CFM AIS defect syslog	%E_CFM-6-ENTER_AIS: local mep with mpid 7606 level 4 BD/VLAN 22 dir D Interface Gi5/1 enters AIS defect condition	CFM enter AIS defect syslog
E_CFM-6-EXIT_AIS	handle CFM AIS defect syslog	%E_CFM-6-EXIT_AIS: local mep with mpid 7606 level 4 BD/VLAN 22 dir D Interface Gi5/1 enters AIS defect condition	CFM exit AIS defect syslog
ETHER_CFM-6-ENTER_AIS_INT	handle CFM interface AIS defect syslog	%ETHER_CFM-6-ENTER_AIS_INT: Interface Ethernet0/0 enters AIS defect condition for outward direction	CFM interface enter AIS defect syslog
ETHER_CFM-6-EXIT_AIS_INT	handle CFM interface AIS defect syslog	%ETHER_CFM-6-EXIT_AIS_INT: Interface Ethernet0/0 enters AIS defect condition for outward direction	CFM interface exit AIS defect syslog
E_CFM-6-ENTER_AIS_INT	handle CFM interface AIS defect syslog	%E_CFM-6-ENTER_AIS_INT: Interface GigabitEthernet5/1 enters AIS defect condition for Down direction	CFM interface enter AIS defect syslog
E_CFM-6-EXIT_AIS_INT	handle CFM interface AIS defect syslog	%E_CFM-6-EXIT_AIS_INT: Interface GigabitEthernet5/1 enters AIS defect condition for Down direction	CFM interface exit AIS defect syslog
E_CFM-6-ENTER_LCK	handle CFM AIS defect syslog	%E_CFM-6-ENTER_LCK: local mep with mpid 7606 level 4 BD/VLAN 22 dir D Interface Gi5/1 enters LCK defect condition	CFM enter LCK defect syslog
E_CFM-6-EXIT_LCK	handle CFM AIS defect syslog	%E_CFM-6-EXIT_LCK: local mep with mpid 7606 level 4 BD/VLAN 22 dir D Interface Gi5/1 exited LCK defect condition	CFM exit LCK defect syslog
E_CFM-6-ENTER_LCK_INT	CFM interface enter LCK defect syslog	%E_CFM-6-ENTER_LCK_INT: Interface GigabitEthernet5/1 enters LCK defect condition for Down direction	CFM interface enter LCK syslog
E_CFM-6-EXIT_LCK_INT	CFM interface exit LCK defect syslog	%E_CFM-6-EXIT_LCK_INT: Interface GigabitEthernet5/1 exited LCK defect condition for Down direction	CFM interface exit LCK syslog
E_CFM-3-REMOTE_MEP_DOWN	handle Remote MEP syslog	%E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 1911 evc DemoAugEVC vlan 911 MA name DemoAugMA in domain DemoAugDA changed state to down with event code TimeOut.	CFM Mep Down syslog
E_CFM-3-REMOTE_MEP_UP	handle Remote MEP syslog	%E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 755 evc EVC_S4_22 vlan 22 MA name S4_22 domain L4 interface status Up event code Returning.	CFM Mep Up syslog
ETHER_CFM-3-REMOTE_MEP_DOWN	handle Remote MEP syslog	%ETHER_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 537 vlan 555 CSIID S4_sw in domain D4_sw changed state to down with event code lastGasp.	CFM Mep Down syslog
ETHER_CFM-3-REMOTE_MEP_UP	handle Remote MEP syslog	%ETHER_CFM-3-REMOTE_MEP_UP: Remote MEP mpid 537 vlan 555 CSIID S4_sw in domain D4_sw changed state to up with event code lastGasp.	CFM Mep Up syslog
E_CFM-6-REMOTE_MEP_DOWN	handle Remote MEP syslog	%E_CFM-6-REMOTE_MEP_DOWN: Continuity Check message is received from a remote MEP with mpid 755 evc EVC_S4_22 vlan 22 MA name S4_22 domain L4 interface status Down event code Returning.	CFM Mep Down syslog
E_CFM-6-REMOTE_MEP_UP	handle Remote MEP syslog	%E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 755 evc EVC_S4_22 vlan 22 MA name S4_22 domain L4 interface status Up event code Returning.	CFM Mep Up syslog
OSPFv3-5-ADJCHG	An OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPFv3 neighbor down syslog
OSPFv3-5-ADJCHG	An OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from LOADING to FULL, Neighbor Down: Interface down or detached	OSPFv3 neighbor up syslog
TOP_MODULE-5-APPL_UPDOWN	Timing over packet application syslog	%TOP_MODULE-5-APPL_UPDOWN: Timing over packet application is down	Timing over packet application down syslog
TOP_MODULE-5-APPL_UPDOWN	Timing over packet application syslog	%TOP_MODULE-5-APPL_UPDOWN: Timing over packet application is up	Timing over packet application up syslog
HSRP-5-STATECHANGE	handle hsrp 5 syslog	%HSRP-5-STATECHANGE: GigabitEthernet0/1.555 Grp 55 state Active -> Init	HSRP group change syslog
HSRP-5-STATECHANGE	handle hsrp 5 syslog	%HSRP-5-STATECHANGE: GigabitEthernet0/1.555 Grp 55 state Active -> Standby	HSRP group restored syslog
DWDM-4-G709ALARM	The specified G709 Alarm has been declared	%DWDM-4-G709ALARM : DWDM 2/0/0 : LOS declared	Layer2 G709 alarm syslog
DWDM-4-G709ALARM	The specified G709 Alarm has been cleared	%DWDM-4-G709ALARM : DWDM 2/0/0 : LOS cleared	Layer2 G709 clear syslog
ETHERNET_OAM-3-LOOPBACK_ERROR	Loopback operation on interface has encountered the specified error	%ETHERNET_OAM-3-LOOPBACK_ERROR: Loopback operation on interface Gi1/1/1 has encountered an error(remote client failed to enter the loopback session)	Ethernet OAM Loopback Error syslog
ETHERNET_OAM-5-LINK_MONITOR	A monitored error has been detected to have crossed user-specified threshold	%ETHERNET_OAM-5-LINK_MONITOR: 0 frame errors detected over the last 10x100 milliseconds on interface Gi1/1/1	Ethernet OAM Link Monitor syslog
ETHERNET_OAM-5-LINK_MONITOR_HT_CROSS	A monitored error has been detected to have crossed user-specified (High threshold) threshold	%ETHERNET_OAM-5-LINK_MONITOR_HT_CROSS: High threshold was crossed on Port Channel [chars]'s last operational member port [chars]. Interface [chars] is kept online	Ethernet OAM Link Monitor high threshold syslog
ETHERNET_OAM-6-(ENTER|EXIT)_SESSION	Ethernet OAM Enter/Exit session syslog	%ETHERNET_OAM-6-EXIT_SESSION: The client on interface Gi1/1/1 has left the OAM session	Ethernet OAM exited the session
ETHERNET_OAM-6-(ENTER|EXIT)_SESSION	Ethernet OAM Enter/Exit session syslog	%ETHERNET_OAM-6-ENTER_SESSION: The client on interface Gi1/1/1 has entered the OAM session	Ethernet OAM entered the session
ETHERNET_OAM-6-LINK_TIMEOUT	Ethernet OAM Link timeout Syslog	%ETHERNET_OAM-6-LINK_TIMEOUT: The client on interface Gi1/1/1 has timed out and exited the OAM session	Ethernet OAM Link timeout Syslog
VRRP-6-STATECHANGE	VRRP state change syslog	%VRRP-6-STATECHANGE: Vl1 Grp 1 state Backup -&gt; Master	VRRP backup to master syslog
VRRP-6-STATECHANGE	VRRP state change syslog	%VRRP-6-STATECHANGE: Vl2 Grp 2 state Master -&gt; Backup	VRRP master to backup syslog
ETHER_LMI-6-MISMATCHED_VLAN_(CONFIGURED|NOT_CONFIGURED)	ELMI VLAN not-Configured/Configured Syslog	%ETHER_LMI-6-MISMATCHED_VLAN_CONFIGURED: VLAN 1300 configured but not in VLAN mapping for UNI GigabitEthernet0/0 Interface	ELMI Vlan configured syslog
ETHER_LMI-6-MISMATCHED_VLAN_(CONFIGURED|NOT_CONFIGURED)	ELMI VLAN not-Configured/Configured Syslog	%ETHER_LMI-6-MISMATCHED_VLAN_NOT_CONFIGURED: VLAN 100 not Configured but in VLAN mapping for UNI FastEthernet1/0/23	ELMI Vlan not configured syslog
PM-4-ERR_(DISABLE|RECOVER)_VP	ELMI VLAN enabled/disabled Syslog	%PM-4-ERR_DISABLE_VP: elmi evc down error detected on Gi0/14, vlan 666. Putting in err-disable state	ELMI Vlan disabled syslog
PM-4-ERR_(DISABLE|RECOVER)_VP	ELMI VLAN enabled/disabled Syslog	%PM-4-ERR_RECOVER_VP: Attempting to recover from elmi evc down err-disable state on Gi0/14, vlan 666	ELMI Vlan enabled syslog
ETHERNET_OAM-6-RFI-Dyinggasp	RFI Dying Gasp Failure Events	%ETHERNET_OAM-6-RFI: The client on interface Et0/0 has received a remote failure indication from its remote peer(failure reason = remote client down action = none)	EOAM RFI dying gasp syslog - admin shutdown on peer
ETHERNET_OAM-6-RFI-Dyinggasp	RFI Dying Gasp Failure Events	%ETHERNET_OAM-6-RFI: The client on interface Gi1/1/1 has received a remote failure indication from its remote peer(failure reason = remote client administratively turned off action = none)	EOAM RFI dying gasp syslog - no ethernet oam
ETHERNET_OAM-6-RFI-Dyinggasp	RFI Dying Gasp Failure Events	%ETHERNET_OAM-6-RFI: The client on interface Gi1/1/1 has received a remote failure indication from its remote peer(failure reason = remote client reloaded action = error-disable)	EOAM RFI dying gasp syslog - admin reload on peer
ETHERNET_OAM-6-RFI-Dyinggasp	RFI Dying Gasp Failure Events	%ETHERNET_OAM-6-RFI: The client on interface Gi1/1/1 has received a remote failure indication from its remote peer(failure reason = dying gasp)	EOAM RFI dying gasp syslog - no org specific TLV
ETHERNET_OAM-6-RFI_CLEAR-Dyinggasp	RFI Dying Gasp clear Event	%ETHERNET_OAM-6-RFI_CLEAR: The client on interface Et0/0 has received a clear of remote failure indication from its remote peer(failure reason = dying gasp action = none)	Eoam RFI dying gasp clear syslog
ETHERNET_OAM-6-RFI-linkfault	RFI link fault event	%ETHERNET_OAM-6-RFI: The client on interface Et0/0 has received a remote failure indication from its remote peer(failure reason = link fault action = none)	EOAM RFI link fault syslog
ETHERNET_OAM-6-RFI_CLEAR-linkfault	link fault clear event	%ETHERNET_OAM-6-RFI_CLEAR: The client on interface Et0/0 has received a clear of remote failure indication from its remote peer(failure reason = link fault action = none)	EOAM RFI link fault clear syslog
PM-4-ERR_(DISABLE|RECOVER)	PM Error disable/recover syslog	%PM-4-ERR_DISABLE: oam-remote-failure error detected on Gi0/1, putting Gi0/1 in err-disable state	PM Error disable syslog
PM-4-ERR_(DISABLE|RECOVER)	PM Error disable/recover syslog	%PM-4-ERR_RECOVER: Attempting to recover from link-flap err-disable state on Fa0/28	PM Error recover syslog
PM-SP-4-ERR_(DISABLE|RECOVER)	PM SP Error disable/recover syslog	%PM-SP-4-ERR_DISABLE: oam-remote-failure-dying-gasp error detected on Gi1/13, putting Gi1/13 in err-disable state	PM SP Error disable syslog
ETHERNET_OAM-6-LOOPBACK	Link loopback OAM Event	%ETHERNET_OAM-6-LOOPBACK: Interface Fa1/3 has entered the master loopback mode	Eoam entered master loopback mode syslog
ETHERNET_OAM-6-LOOPBACK	Link loopback OAM Event	%ETHERNET_OAM-6-LOOPBACK: Interface Gi1/1 has exited the master loopback mode.	Eoam exited master loopback mode syslog
ETHERNET_OAM-6-LOOPBACK	Link loopback OAM Event	%ETHERNET_OAM-6-LOOPBACK: Interface Gi1/1/1 has entered the slave loopback mode.	Eoam entered slave loopback mode syslog
ETHERNET_OAM-6-LOOPBACK	Link loopback OAM Event	%ETHERNET_OAM-6-LOOPBACK: Interface Gi1/1/1 has exited the slave loopback mode.	Eoam exited slave loopback mode syslog
TRANSCEIVER-DFC-6-INSERTED	Transceiver inserted syslog	%TRANSCEIVER-DFC3-6-INSERTED: transceiver module inserted in GigabitEthernet3/18	Transceiver inserted syslog
TRANSCEIVER-DFC-6-REMOVED	Transceiver removed syslog	%TRANSCEIVER-DFC3-6-REMOVED: Transceiver module removed from GigabitEthernet3/1	Transceiver removed syslog
OIR-SP-6-INSCARD	handle card remove syslog	%OIR-SP-6-INSCARD: Card removed from slot 3, interfaces up	card in syslog
OIR-SP-6-REMCARD	handle card remove syslog	%OIR-SP-6-REMCARD: Card removed from slot 3, interfaces disabled	card out syslog

Cisco IOX Syslogs

Table 43-3 lists the Cisco IOX Syslogs supported in Cisco ANA.

Table 43-3 Cisco IOX Syslogs 

Syslog Name	Description	Raw Format	Short Description
LINK-3-UPDOWN	The interface hardware has gone either down or up.	%LINK-3-UPDOWN: Interface ATM2/0, changed state to down	Link down syslog
LINK-3-UPDOWN	The interface hardware has gone either down or up.	%LINK-3-UPDOWN: Interface ATM2/0, changed state to up	Link up syslog
LINK-5-CHANGED	The interface has changed state.	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively up	Link down syslog
LINK-5-CHANGED	The interface has changed state.	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively down	Link up syslog
LINEPROTO-5-UPDOWN	The data link level line protocol changed state.	%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up	Line down syslog
LINEPROTO-5-UPDOWN	The data link level line protocol changed state.	%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up	Line up syslog
OSPF-5-ADJCHG	An OSPF neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPF-5-ADJCHG: Process 1, Nbr 192.168.100.100 on POS1/0 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPF neighbor down syslog
OSPF-5-ADJCHG	An OSPF neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPF-5-ADJCHG: Process 1, Nbr 192.168.100.100 on POS1/0 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPF neighbor up syslog
ENVMON-ADDITIVE-POWER-OVERBUDGET	The power calculated in use by the chassis exceeds that available by the powershelf. This condition could result in an outage of the chassis if action is not immediately taken	PLATFORM-ENVMON-2-POWERSUPPLY_CURRENT : 1 current has reached high level at 1 A	envmon powersupply syslog
ENVMON-ENV-CONDITION	One or more environmental conditions exist on the specified slot. If left untended, they could result in loss of service or even hardware damage	PLATFORM-ENVMON-2-ENV_CONDITION : An environmental condition exists on slot 1	envmon condition syslog
ENVMON-ENV-CONDITION	One or more environmental conditions exist on the specified slot. If left untended, they could result in loss of service or even hardware damage	PLATFORM-ENVMON-2-ENV_CONDITION_CLEAR : The environmental condition on slot 1 has cleared	envmon condition clear syslog
ENVMON-FAN	The fan array specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-FAN : The fan array 1 has reached high level.	envmon fan syslog
ENVMON-FAN	The fan array specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-FAN_CLEAR : The fan array 1 has reached high level.	envmon fan clear syslog
ENVMON-LOW-FAN-SPEED-WARNING	Indicates that the fan is spinning very slow	PLATFORM-ENVMON-5-LOW_FAN_SPEED_WARNING : 1 is spinning slow - speed is dRPM (register value = 0x x)	envmon fan syslog
ENVMON-OVERTEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-OVERTEMP : 1 temperature has reached high level	envmon tempretaure syslog
ENVMON-OVERTEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-OVERTEMP_CLEAR : 1 temperature has returned to a normal level	envmon tempretaure clear syslog
ENVMON-PEM-REMOVE	The power entry module specified was detected as removed	PLATFORM-ENVMON-5-PEM_REMOVE : 2 removed from slot 2	card out syslog
ENVMON-PEM-REMOVE	The power entry module specified was detected as removed	PLATFORM-ENVMON-5-PEM_INSERT : 2 inserted into slot 2	card in syslog
ENVMON-POWERSUPPLY-CURRENT	handle envmon powersupply current syslog	PLATFORM-ENVMON-2-POWERSUPPLY_CURRENT : 1 current has reached high level at 1 A	envmon powersupply syslog
ENVMON-POWERSUPPLY-CURRENT	The current supply specified has reached a critical level and is now out of specification	PLATFORM-ENVMON-2-POWERSUPPLY_CURRENT_CLEAR : 1 current has returned to a normal level at d	envmon powersupply clear syslog
ENVMON-POWERSUPPLY-NONOP	The power supply specified has become non operational	PLATFORM-ENVMON-2-POWERSUPPLY_NONOP : Powersupply1 is Non-Operational	envmon powersupply syslog
ENVMON-POWERSUPPLY-NONOP	The power supply specified has become non operational	PLATFORM-ENVMON-2-POWERSUPPLY_NONOP_CLEAR : Powersupply1 has become operational	envmon powersupply clear syslog
ENVMON-POWERSUPPLY-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	PLATFORM-ENVMON-2-POWERSUPPLY_VOLTAGE : Powersupply1 voltage has reached high level at 11 V	envmon powersupply syslog
ENVMON-POWERSUPPLY-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	PLATFORM-ENVMON-2-POWERSUPPLY_VOLTAGE_CLEAR : Powersupply1 voltage has returned to a normal level at d V	envmon powersupply clear syslog
ENVMON-TEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-OVERTEMP : 1 temperature has reached high level	envmon tempretaure syslog
ENVMON-TEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-OVERTEMP_CLEAR : 1 temperature has returned to a normal level	envmon tempretaure clear syslog
ENVMON-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	PLATFORM-ENVMON-2-POWERSUPPLY_VOLTAGE : Powersupply1 voltage has reached high level at 11 V	envmon powersupply syslog
ENVMON-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	PLATFORM-ENVMON-2-POWERSUPPLY_VOLTAGE_CLEAR : Powersupply1 voltage has returned to a normal level at d V	envmon powersupply clear syslog
FIA-FIAHW-LOS	This error indicates a problem (Loss of Sync) in the interface between the card reporting error and the switch fabric card in the indicated slot. This error is traffic affecting. Error recovery is triggered by this error	ENVMON-3-FIAHW_LOS : Persistent LOS on serial link (from slot 2)	fabric hardware syslog
FIA-FIAHW-LOS	This error indicates a problem (Loss of Sync) in the interface between the card reporting error and the switch fabric card in the indicated slot. This error is traffic affecting. Error recovery is triggered by this error	ENVMON-3-FIAHW_LOS_CLEAR LOS : cleared on serial link (from slot 2)	fabric hardware clear syslog
FLASH-CARD-REMOVAL	handle flash card insertion or removal syslog	libpcmcia_ide-1-CARD_UNAVAILABLE : flash1: Can not access flash device	flash card removed syslog
FLASH-CARD-REMOVAL	handle flash card insertion or removal syslog	libpcmcia_ide-1-CARD_SWAPPED : flash1: The flash card has been swapped (OIR)	flash card inserted syslog
LIBPARSER-ERR-MEMALLOC	handle memory allocation in syslog	MGBL-LIBPARSER-3-ERR_MEM_ALLOC : s: memory allocation routine failed.	Memory allocation is not available
NODE-RELOAD	handle node reload syslog by sysldr	PLATFORM-SHELFMGR-3-SHUTDOWN_RESET : Node 0/SM2/* is reset due to admin shut shut request	Module reset syslog
NODE-STATE-CHANGE	Indicates a change in the card oper status	PLATFORM-INVMGR-6-NODE_STATE_CHANGE : Node: 0/RP0/*, state: BRINGDOWN	Card oper status changed
NODE-STATE-CHANGE	Indicates a change in the card oper status	PLATFORM-INVMGR-6-NODE_STATE_CHANGE : Node: 0/0/CPU0, state: IOS XR RUN	Card oper status changed
OIROUT	handle module out syslog	%PLATFORM-INV-6-OIROUT : OIR: Node 0/0/CPU0 removed	card out syslog
OIROUT	handle module out syslog	%PLATFORM-INV-6-OIRIN : OIR: Node 0/0/CPU0 inserted	card in syslog
OIROUT-on-CPU0	handle module out syslog	%PLATFORM-INV-6-OIROUT : OIR: Node 0/0/CPU0 removed	card out syslog
OIROUT-on-CPU0	handle module out syslog	%PLATFORM-INV-6-OIRIN : OIR: Node 0/0/CPU0 inserted	card in syslog
PIM-5-NBRCHG	handle pim neighbor syslog	PIM-5-NBRCHG: neighbor 172.72.73.1 DOWN on MgmtEth0/RSP0/CPU0/1	pim neighbor loss syslog
PIM-5-NBRCHG	handle pim neighbor syslog	PIM-5-NBRCHG: neighbor 192.168.2.1 UP on MgmtEth0/RSP0/CPU0/1	pim neighbor up syslog
PIM-5-UPDOWN	handle pim interface syslog	ROUTING-IPV4_PIM-5-INTCHG : PIM interface GigabitEthernet0/3/0/0 DOWN	pim interface down syslog
PIM-5-UPDOWN	handle pim interface syslog	ROUTING-IPV4_PIM-5-INTCHG : PIM interface GigabitEthernet0/3/0/0 UP	pim interface up syslog
PIM-INVALID-JOIN	handle pim invlid join in syslog	ROUTING-IPV4_PIM-5-INVALID_JP : PIM invalid POS0/2/0/0 J/P message from POS0/2/0/0 with RP address 1.1.1.1	pim invalid join syslog
POWERDOWN-RESET	Indicates that the node will be reset because the user has administratively `power disable' or `no power disable' the node	PLATFORM-SHELFMGR-3-POWERDOWN_RESET : Node 0/0/CPU0 is powered off due to admin power off request	Card oper status changed
POWERDOWN-RESET	Indicates that the node will be reset because the user has administratively `power disable' or `no power disable' the node	PLATFORM-SHELFMGR-3-POWERDOWN_RESET : Node 0/0/CPU0 is powered on due to admin power on request	Card oper status changed
SONET-LOCAL-4-ALARM	The specified SONET Alarm has been declared or released	SONET_LOCAL-4-ALARM : Interface SONET/2/0/0: changed SLOS	Line down syslog
SONET-LOCAL-4-ALARM	The specified SONET Alarm has been declared or released	SONET_LOCAL-4-ALARM : Interface SONET/2/0/0: changed SLOS cleared	Line up syslog
SPA-OIROUT	handle invmgr node state change syslog	<SourceID>LC/0/0/CPU0</SourceID> L2-SPA-5-OIR_REMOVED : SPA removed from bay 0	card out syslog
SPA-OIROUT	handle invmgr node state change syslog	<SourceID>LC/0/0/CPU0</SourceID> L2-SPA-5-OIR_INSERTED : SPA discovered in bay 0	card in syslog
ROUTING-LDP-5-NBR_CHANGE	A LDP neighbor has changed state (up/down). If neighbor has went down, then a reason for session going down is also displayed. This message appears only if the log neighbor command is configured for the LDP process.	ROUTING-LDP-5-NBR_CHANGE : Neighbor 7.7.7.7:0, DOWN	LDP neighbor down syslog
ROUTING-LDP-5-NBR_CHANGE	A LDP neighbor has changed state (up/down). If neighbor has went down, then a reason for session going down is also displayed. This message appears only if the log neighbor command is configured for the LDP process.	gRP/0/RP0/CPU0:Sep 25 14:22:35.329 : mpls_ldp[274]: ROUTING-LDP-5-NBR_CHANGE : Neighbor 7.7.7.7:0, UP	LDP neighbor up syslog
BGP-5-ADJCHANGE	The adjacent BGP neighbor was lost	BGP-5-ADJCHANGE : neighbor 172.23.95.15 Down - BGP Notification received: configuration change	BGP neighbor down syslog
BGP-5-ADJCHANGE	The adjacent BGP neighbor was lost	BGP-5-ADJCHANGE : neighbor 172.23.95.15 Up - BGP Notification received: configuration change	BGP neighbor up syslog
SECURITY-4-AUTHEN_FAILED	The user login authentication failed	SECURITY-login-4-AUTHEN_FAILED. : Failed authentication attempt by user 'user_A' from '161.44.192.231'	Login authentication failed syslog
MGBL-INVENTORY-6-PORTS	Sent by the XR device after a card-in event has occured and the If and Entity tables are in sync. Once Cisco ANA receives the syslog, it will expedite the physical command instead of the card-in syslogs doing the expedite, so that the polling is done only after the tables are synchronized.	%MGBL-INVENTORY-6-PORTS : ifTable INSYNC for card:0/PL7/* entPhysicalIndex:239	If-Table in sync syslog
L2-BFD-6-SESSION_STATE_DOWN	The bfd session is down	%L2-BFD-6-SESSION_STATE_DOWN : BFD session to neighbor 23.1.1.1 on interface GigabitEthernet0/2/0/0 has gone down. Reason: Echo function failed	bfd session down syslog
L2-BFD-6-SESSION_REMOVED	The bfd session has been removed	%L2-BFD-6-SESSION_REMOVED : BFD session to neighbor 23.1.1.1 on interface GigabitEthernet0/2/0/0 has gone down. Reason: Echo function failed	bfd session removed syslog
L2-BFD-6-SESSION_STATE_UP	The bfd session is up	%L2-BFD-6-SESSION_STATE_UP : BFD session to neighbor 23.1.1.1 on interface GigabitEthernet0/2/0/0 has gone down. Reason: Echo function failed	bfd session up syslog
L2-G709-4-ALARM	The specified G709 Alarm has been declared or released	LC/0/0/CPU0:Feb 16 05:36:25.553 : plim_4p_10ge_dwdm[204]: %L2-G709-4-ALARM : DWDM0/0/0/0: LOS	Layer2 G709 alarm syslog
L2-G709-4-ALARM-CLEARED	The specified G709 Alarm has been declared or released	LC/0/0/CPU0:Feb 16 05:36:25.553 : plim_4p_10ge_dwdm[204]: %L2-G709-4-ALARM : DWDM0/0/0/0: LOS cleared	Layer2 G709 clear syslog
L2-DWDM-3-INFO	The DWDM encountered an error that would lead to degraded service	LC/0/0/CPU0:Feb 16 05:36:25.553 : plim_4p_10ge_dwdm[204]: %L2-DWDM-3-INFO dwdm: service degrading error, reason equals ERROR	Layer2 dwdm info syslog
L1-PMENGINE-4-TCA	The specified PM TCA has been declared	%L1-PMENGINE-4-TCA Port [chars] reports [chars] [chars]([chars]) PM TCA with current value [unsigned long long int], threshold [unsigned long long int] in current [chars] interval window	Layer1 PM TCA syslog
L2-SPA-3-POWER_FAILURE	SPA_OK and PWR_OK signals are asserted after the SPA is powered on by LC. These signals are deasserted when there is a power failure on the SPA and this failure indicates that it is an SPA hardware issue. The SPA is put into FAILED state.	%L2-SPA-3-POWER_FAILURE SPA_OK and PWR_OK signal is deasserted on subslot [unsigned int]	Layer2 SPA failure syslog
ROUTING-OSPF-5-ADJCHG	An OSPF routing neighbor has changed state. The message describes the change and the reason for it.	%ROUTING-OSPF-5-ADJCHG : Process 1, Nbr 2.2.2.2 on MgmtEth0/7/CPU0/2 in area 0 from FULL to DOWN, Loading Done,vrf default vrfid 0x60000000	OSPF routing neighbor down syslog
ROUTING-OSPF-5-ADJCHG	An OSPF routing neighbor has changed state. The message describes the change and the reason for it.	%ROUTING-OSPF-5-ADJCHG : Process 1, Nbr 2.2.2.2 on MgmtEth0/7/CPU0/2 in area 0 from LOADING to FULL, Loading Done,vrf default vrfid 0x60000000	OSPF routing neighbor up syslog
OSPFv3-5-ADJCHG-IPv6	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPFv3 neighbor down syslog
OSPFv3-5-ADJCHG-IPv6	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from LOADING to FULL, Neighbor Down: Interface down or detached	OSPFv3 neighbor up syslog
ROUTING-OSPFv3-5-ADJCHG	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%ROUTING-OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPFv3 routing neighbor down syslog
ROUTING-OSPFv3-5-ADJCHG	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%ROUTING-OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from LOADING to FULL, Neighbor Down: Interface down or detached	OSPFv3 routing neighbor up syslog
BGP-5-ADJCHANGE-IPv6	The IPv6 adjacent BGP neighbor was lost	%ROUTING-BGP-5-ADJCHANGE : neighbor 3.3.3.3 down (VRF: default) %ROUTING-BGP-5-ADJCHANGE : neighbor 2001:210:10:1::1 Down - User clear requested	Routing BGP neighbor down syslog
BGP-5-ADJCHANGE-IPv6	The IPv6 adjacent BGP neighbor was lost	%ROUTING-BGP-5-ADJCHANGE : neighbor 3.3.3.3 Up (VRF: default) %ROUTING-BGP-5-ADJCHANGE : neighbor 2001:210:10:1::1 Up	Routing BGP neighbor up syslog
ROUTING-BGP-5-ADJCHANGE	The IPv6 adjacent BGP neighbor was lost	%ROUTING-BGP-5-ADJCHANGE : neighbor 3.3.3.3 down (VRF: default) %ROUTING-BGP-5-ADJCHANGE : neighbor 2001:210:10:1::1 Down - User clear requested	IPv6 Routing BGP neighbor down syslog
ROUTING-BGP-5-ADJCHANGE	The IPv6 adjacent BGP neighbor was lost	%ROUTING-BGP-5-ADJCHANGE : neighbor 3.3.3.3 Up (VRF: default) %ROUTING-BGP-5-ADJCHANGE : neighbor 2001:210:10:1::1 Up	IPv6 Routing BGP neighbor up syslog
L2-L2VPN_PW-3-UPDOWN	The L2VPN Pseudowire went down	%L2-L2VPN_PW-3-UPDOWN : Pseudowire with address 2.2.2.2, id 140, state is Down	pseudo wire tunnel down syslog
L2-L2VPN_PW-3-UPDOWN	The L2VPN Pseudowire went up	%L2-L2VPN_PW-3-UPDOWN : Pseudowire with address 2.2.2.2, id 140, state is Up	pseudo wire tunnel up syslog
ETHER_SERVICE-6-ERR_DISABLED	Service instance shutdown due to errdisable.	%ETHER_SERVICE-6-ERR_DISABLED: Mac security violation - shutdown service instance 900 on interface GigabitEthernet10/0/12	EFP service error disabled syslog
L2-DWDM-3-NOT_YET_IMPLEMENTED	handle L2-DWDM-3-NOT_YET_IMPLEMENTED syslog	%L2-DWDM-3-NOT_YET_IMPLEMENTED dwdm: this function [chars] is not yet implemented	DWDM feature not implemented yet
L2-DWDM-3-FATAL_2	handle L2-DWDM-3-FATAL_2 syslog	%L2-DWDM-3-FATAL_2 dwdm: fatal error encountered, reason equals [chars], errno equals 1	DWDM fatal error with reason and error number
L2-DWDM-3-FATAL	handle L2-DWDM-3-FATAL syslog	%L2-DWDM-3-FATAL dwdm: fatal error encountered, reason equals 1	DWDM fatal error with reason
L2-PLIM-2-EIO_TRAIN	handle L2-PLIM-2-EIO_TRAIN syslog	%L2-PLIM-2-EIO_TRAIN PLA: [chars], [chars]	PLIM EIO training errors syslog
L2-PLIM-3-CHK_ERR	handle L2-PLIM-3-CHK_ERR syslog	%L2-PLIM-3-CHK_ERR PLA: [chars], [chars]	PLIM Checkpoint Initialization Failure syslog
L2-PLIM-3-HW_ERR	handle L2-PLIM-3-HW_ERR syslog	%L2-PLIM-3-HW_ERR asic error: [chars]	PLIM ASIC error syslog
L2-PLIM-3-MEM_ERR	handle L2-PLIM-3-MEM_ERR syslog	%L2-PLIM-3-MEM_ERR [chars]	PLIM memory error syslog
L2-PLIM-3-SQUID_ERR	handle L2-PLIM-3-SQUID_ERR syslog	%L2-PLIM-3-SQUID_ERR [chars]	PLIM squid error syslog
L2-PLIM-7-ERR	handle L2-PLIM-7-ERR syslog	%L2-PLIM-7-ERR [chars]	PLIM 7 error syslog
L2-PLIM_OC768-3-CRITICAL_ERROR	handle L2-PLIM_OC768-3-CRITICAL_ERROR syslog	%L2-PLIM_OC768-3-CRITICAL_ERROR [chars]: [chars]: [hex]	PLIM OC768 critical error syslog
L2-PLIM_OC768-6-INFO	handle L2-PLIM_OC768-6-INFO syslog	%L2-PLIM_OC768-6-INFO [chars]: [chars]	PLIM OC768 INFO syslog
L2-PLIM_OC768-7-DEBUG_MSG	handle L2-PLIM_OC768-7-DEBUG_MSG syslog	%L2-PLIM_OC768-7-DEBUG_MSG Debug: [chars]: [chars] errno 1	PLIM OC768 debug syslog
BGP-3-NOTIFICATION	handle BGP 3 syslog	%BGP-3-NOTIFICATION: sent to neighbor 10.10.10.254 4/0 (hold time expired) 0 bytes	BGP notification syslog
BGP-3-NOTIFICATION	handle BGP 3 syslog	%BGP-3-NOTIFICATION: sent to neighbor 10.10.10.254 4/0 (hold time expired) 0 bytes	BGP notification syslog
ROUTING-ISIS-4-ADJCHANGE	handle ROUTING-ISIS-4-ADJCHANGE syslog	RP/0/RSP1/CPU0:Oct 19 19:48:32.212 : isis[240]: %ROUTING-ISIS-4-ADJCHANGE : Adjacency to AGS2a (Bundle-Ether1) (L1) Down, Interface state down	routing ISIS neighbor down syslog
ROUTING-ISIS-4-ADJCHANGE	handle ROUTING-ISIS-4-ADJCHANGE syslog	RP/0/RSP1/CPU0:Oct 19 19:48:32.212 : isis[240]: %ROUTING-ISIS-4-ADJCHANGE : Adjacency to AGS2a (Bundle-Ether1) (L1) Up, Interface state up	routing ISIS neighbor up syslog
IP-VRRP-6-INFO_STATECHANGE	handle VRRP state change syslog	%IP-VRRP-6-INFO_STATECHANGE : GigabitEthernet0_5_0_1 vrid 10: state Backup\t -> Master	Backup to Master change syslog
IP-VRRP-6-INFO_STATECHANGE	handle VRRP state change syslog	%IP-VRRP-6-INFO_STATECHANGE : GigabitEthernet0_5_0_1 vrid 10: state Master\t -> Backup	Master to Backup change syslog
IP-STANDBY-6-INFO_STATECHANGE	IP STANDBY 6 INFO STATECHANGE Syslog	%IP-STANDBY-6-INFO_STATECHANGE : SB81: GigabitEthernet0/4/1/3: state Active -> Init	IP standby state change syslog
IP-STANDBY-6-INFO_STATECHANGE	IP STANDBY 6 INFO STATECHANGE Syslog	%IP-STANDBY-6-INFO_STATECHANGE : SB81: GigabitEthernet0/4/1/3: state Standby -> Active	IP standby state restored syslog
L2-DWDM-5-SRLG_OVERFLOW	CTC has more than 100 values to configure, it indicates this situation by configuring the 101st value with a positive integer	%L2-DWDM-5-SRLG_OVERFLOW DWDM: 15: 150, Overflow of SRLGs: 105	DWDM5 SRLG OVERFLOW syslog

Cisco ACE Syslogs

Table 43-4 lists the Cisco ACE Syslogs supported in Cisco ANA.

Table 43-4 Cisco ACE Syslogs 

Syslog Name	Description	Raw Format	Short Description
LINK-5-CHANGED	handle link down syslog	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively up	Link down syslog
LINK-5-CHANGED	handle link down syslog	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively down	Link up syslog
LINK-3-UPDOWN	handle link down syslog	%LINK-3-UPDOWN: Interface ATM2/0, changed state to down	Link down syslog
LINK-3-UPDOWN	handle link down syslog	%LINK-3-UPDOWN: Interface ATM2/0, changed state to up	Link up syslog
ACE-1-106021	Deny protocol reverse path check.	%ACE-1-106021: Deny protocol 0 reverse path check from 11.1.13.110 to 11.1.11.110 on interface vlan12	Deny protocol reverse path check
ACE-1-106028	Access rule memory exhausted.	%ACE-1-106028: WARNING: Unknown error while processing merged list. Incomplete rule is currently applied on interface vlan31. Manual roll back to a previous access rule configuration on this interface is needed	Access rule memory exhausted
ACE-1-444006	License manager exiting.	%ACE-1-444006: License manager exiting: reason	License manager exiting
ACE-1-456029	The ACE attempted to start or set up the application acceleration core daemon process.	%ACE-1-456029: Error creating ACC core process. [reason]	The ACE attempted to start or set up the application acceleration core daemon process
ACE-1-456078	Critical shared memory setup failure.	%ACE-1-456078: Critical shared memory setup failure. [reason]	Critical shared memory setup failure
ACE-1-456080	Critical Semaphore related errors.	%ACE-1-456080: Critical Semaphore related errors. [reason]	Critical Semaphore related errors
ACE-1-456085	A generic alert-level message.	%ACE-1-456085: Message.	A generic alert-level message
ACE-1-456086	The ACE initialization has failed.	%ACE-1-456086: Error initializing the ACE. [reason]	The ACE initialization has failed
ACE-1-727001	Peer IP address is not reachable.	lbm050b/Admin# Jul 31 2009 09:07:09 Admin: %ACE-1-727001: HA: Peer 172.21.5.65 is not reachable. Error: Heartbeat stopped. No alternate interface configured	Peer IP address is not reachable
ACE-1-727002	Peer device is not reachable on an FT Interface.	%ACE-1-727002: HA: FT interface 0 to reach peer 172.28.0.221 is down. Error: Heartbeat stopped. Peer is reachable via alternate interface	Peer device is not reachable on an FT Interface
ACE-1-727003	Mismatch in context names detected for FT group.	%ACE-1-727003: hostname: HA: Mismatch in context names detected for FT	Mismatch incontext names detected for FTgroup
ACE-1-727004	Both devices were detected to be Active for the same FT group.	%ACE-1-727004: HA: Two actives have been detected for FT group 5.	Both devices were detected to be Active for the same FT group
ACE-1-727005	Configuration could not be synced to the peer device.	Dec 13 2006 12:56:16 6K-1_ACE1: %ACE-1-727005: HA: Configuration Replication failed for context SH-Gold. Error : Running configuration sync has completed to peer Jun 19 2007 20:59:09 slot4: %ACE-1-727005: HA: Configuration Replication failed for context user-1. Error : script file not configured	Configuration could not be synced to the peer device
ACE-1-727006	Peer is incompatible.	%ACE-1-727006: HA: Peer 1 is incompatible due to SRG Compatibility Mismatch. Cannot be Redundant.	Peer is incompatible
ACE-1-727007	Module Initialization failure.	%ACE-1-727007: hostname: HA: Module Initialization failure - Error Error str.	Module Initialization failure
ACE-1-727008	Failed to send heartbeats to peer.	34(Nov9 2008 04:46:36): from "KERN" ACE-1-727008:HA: Failed to send heartbeats to peer. Internal error: Failed to communicate to IXP	Failed to send heartbeats to peer
ACE-1-728001	Initialization failure - general.	ACE-1-728001: Initialization failure (general) type variable1.	Initialization failure - general
ACE-1-728002	Initialization failure - sticky.	ACE-1-728002: Initialization failure (sticky) type variable1.	Initialization failure - sticky
ACE-1-728003	Initialization failure - sticky hash.	ACE-1-728003: Initialization failure (sticky hash) variable1 entries, variable2 min, variable3 max type variable4.	Initialization failure - sticky hash
ACE-2-100001	The CLI end of line (EOL) function.	%ACE-2-100001: EOL function chars from library chars exited due to Signal dec	The CLI end of line (EOL) function
ACE-2-199006	Reload started .	6K-1_ACE2-1 login: admApr 4 2008 08:28:56 Admin: %ACE-2-199006: Orderly reload started at Fri Apr 4 08:28:55 2008 by System. Reload reason: Service "cfgmgr"	Reload started
ACE-2-212007	SNMPD initialization failed.	%ACE-2-212007: SNMPD initialization failed while Variable1	SNMPD initialization failed
ACE-2-313006	ICMP Manager Initialization Failed.	%ACE-2-313006: ICMP Manager Initialization Failed. Reason : Variable1	ICMP Manager Initialization Failed
ACE-2-443001	System experienced fatal failure.	Nov 21 18:14:31 172.27.15.69 Nov 21 2007 18:14:30 : %ACE-2-443001: System experienced fatal failure.Service name:ifmgr(910) has terminated on receiving signal 10,reloading system	System experienced fatal failure
ACE-2-444001	License checkout failure.	%ACE-2-444001: License checkout failure for feature ACE-AP-C-UP1: Cannot read data from license server system.	License checkout failure
ACE-2-444004	Evaluation license expired.	%ACE-2-444004: Evaluation license expired for feature ACE-VIRT-050	Evaluation license expired
ACE-2-456014	Invalid stream.	%ACE-2-456014: Invalid stream. [reason]	Invalid stream
ACE-2-456090	Critical error parsing ACC module configuration.	%ACE-2-456090: Critical error parsing ACC module configuration config_directive reason.	Critical error parsing ACC module configuration
ACE-2-727009	Communication failure.	%ACE-2-727009: hostname: HA: Communication failure for Peer Peer id Event: error str.	Communication failure
ACE-2-727010	Data replication failed and not synced to the peer device.	%ACE-2-727010: hostname: HA: Data replication failed for context ctx name. Error code error str.	Data replication failed and not synced to the peer device
ACE-2-727011	Configuration synchronization does not occur.	%ACE-2-727011: HA: FT Group 2 changed state to FSM_FT_STATE_ELECT. Event: FSM_FT_EV_PEER_COMP	Configuration synchronization does not occurred
ACE-2-727012	The state transitions made by an HA state device for a context.	Dec 21 2006 06:04:16 6kbACE: %ACE-2-727012: HA: FT Group 2 changed state to FSM_FT_STATE_STANDBY_BULK. Event: FSM_FT_EV_CFG_SYNC_STATUS Dec 21 2006 06:04:36 6kbACE: %ACE-2-727012: HA: FT Group 1 changed state to FSM_FT_STATE_STANDBY_HOT. Event: FSM_FT_EV_BULK_SYNC_STATUS Dec 21 2006 06:05:19 6kbACE: %ACE-2-727012: HA: FT Group 101 changed state to FSM_FT_STATE_STANDBY_COLD. Event: FSM_FT_EV_CFG_SYNC_STATUS Dec 21 2006 06:05:24 6kbACE: %ACE-2-727012: HA: FT Group 1 changed state to FSM_FT_STATE_STANDBY_COLD. Event: FSM_FT_EV_MAINT_MODE_SBY_COLD	The state transitions made by an HA state device for a context.
ACE-2-727013	The peer is now reachable.	%ACE-2-727013: hostname: HA: Peer Peer # is UP and reachable.	The peer is now reachable
ACE-2-727014	The redundancy heartbeats from a peer have become unidirectional.	%ACE-2-727014: hostname: HA: Heartbeats from Peer Peer id have become unidirectional.	The redundancy heartbeats from a peer have become unidirectional
ACE-2-727015	Detected mismatch in heartbeat interval from the peer.	%ACE-2-727015: hostname: HA: Detected mismatch in heartbeat interval from Peer peer id. Modified interval to interval.	Detected mismatch in heartbeat interval from the peer
ACE-2-727016	The replication is being carried out to a peer.	%ACE-2-727016: hostname: HA: Replication for context ctx name has started. Status - status.	The replication is being carried out to a peer
ACE-2-727017	ACE FT Track UP syslog	%ACE-2-727017: hostname: HA: FT Track track type track name is UP.	ACE FT Track UP syslog
ACE-2-727018	ACE FT Track DOWN syslog	%ACE-2-727018: hostname: HA: FT Track track type track name is DOWN.	ACE FT Track DOWN syslog
ACE-LB_General-2-728033	Drop connection as Application Acceleration Maximum.	%ACE-LB_General-2-728033: Drop connection as Application Acceleration Maximum concurrent connection is x (maximum was x connections)	Drop connection as Application Acceleration Maximum
ACE-LB_General-2-728035	Disabled Web Application Acceleration	%ACE-LB_General-2-728035: Disabled Web Application Acceleration: Maximum configured concurrent connections limit (<count>) reached, sending connections to real servers	Disabled Web Application Acceleration
ACE-LB_General-2-728036	Enabled Web Application Acceleration.	%ACE-LB_General-2-728036: Enabled Web Application Acceleration: New connections will be sent for Optimization.(concurrent connections count <count>)	Enabled Web Application Acceleration

Cisco Nexus Syslogs

Table 43-5 lists the Cisco Nexus Syslogs supported in Cisco ANA.

Table 43-5 Cisco Nexus Syslogs 

Syslog Name	Description	Raw Format	Short Description
HSRP_ENGINE-6-STATECHANGE	handle HSRP_ENGINE-6-STATECHANGE syslog	2009 Dec 15 07:32:14 MCS2-COREDP-NX-MCS2-DP-NX %HSRP_ENGINE-6-STATECHANGE: Vlan279 Grp 279 state move to Init	HSRP group change syslog
HSRP_ENGINE-6-STATECHANGE	handle HSRP_ENGINE-6-STATECHANGE syslog	2009 Dec 15 07:32:13 MCS2-COREDP-NX-MCS2-DP-NX %HSRP_ENGINE-6-STATECHANGE: Vlan279 Grp 279 state move to Active	HSRP group restored syslog
BGP-5-ADJCHANGE	handle BGP 5 syslog	2009 Sep 23 13:54:50 NEXUS-TRUE-CORE-1 %BGP-5-ADJCHANGE: bgp-7470 [4713] (default) neighbor 61.91.210.49 Down - session closed	BGP neighbor down syslog
BGP-5-ADJCHANGE	handle BGP 5 syslog	2009 Sep 23 13:54:50 NEXUS-TRUE-CORE-1 %BGP-5-ADJCHANGE: bgp-7470 [4713] (default) neighbor 61.91.210.49 Up - session closed	BGP neighbor up syslog
OSPF-5-ADJCHANGE	handle OSPF-5-ADJCHANGE syslog	2009 Mar 4 22:21:45 NEXUS-TRUE-CORE-1 %OSPF-5-ADJCHANGE: ospf-100 [4324] Nbr 203.144.143.114 on Vlan48 went DOWN	OSPF neighbor down syslog
OSPF-5-ADJCHANGE	handle OSPF-5-ADJCHANGE syslog	2009 Mar 4 22:21:45 NEXUS-TRUE-CORE-1 %OSPF-5-ADJCHANGE: ospf-100 [4324] Nbr 203.144.143.114 on Vlan48 went DOWN	OSPF neighbor up syslog

Cisco ASR 9000 Syslog Registry Parameters

Table 43-6 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Cisco ASR 9000 syslogs shown in Table 43-1.

Table 43-6 Cisco ASR 9000 Syslog Registry Parameters  

Short Description	Event Type	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
Power supply inserted syslog	power supply removed syslog	power supply inserted syslog	inserted	N	IModule	F	F	F	0	F	clr	F	T	F
Power supply removed syslog	power supply removed syslog	power supply removed syslog	removed	N	IModule	F	F	F	0	F	maj	T	T	F
Backup to Master change syslog	Backup to Master syslog	Backup to Master syslog	Backup	N	IIPInterface	F	F	F	0	F	info	T	T	F
Master to Backup change syslog	Backup to Master syslog	Master to Backup syslog	Master	N	IIPInterface	F	F	F	0	F	info	T	T	F
BFD rate limit high warning syslog	bfd rate limit high warning syslog	bfd rate limit high warning syslog	N/A	N	IBfdService	F	F	F	0	T	wrn	F	T	F
RIP authentication failed syslog	rip authentication failed syslog	rip authentication failed syslog	N/A	N	IIPInterface	F	F	F	0	T	min	F	T	F
RIP configuration error syslog	rip configuration error syslog	rip configuration error syslog	N/A	N	IManagedElement	F	F	F	0	T	min	F	T	F
RIP out of memory event syslog	rip out of memory event syslog	rip out of memory event syslog	N/A	N	IManagedElement	F	F	F	0	F	info	F	T	F
routing ISIS neighbor down syslog	routing isis neighbor down syslog	routing isis neighbor down syslog	down	N	IPhysicalLayer	F	T	F	0	F	maj	F	T	F
routing ISIS neighbor up syslog	routing isis neighbor down syslog	routing isis neighbor up syslog	up	N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Ethernet OAM Remote loopback session stopped Syslog	Ethernet OAM loopback session stopped	Ethernet OAM Remote loopback session stopped	remote,stopped	oam	IPhysicalLayer	F	F	F	0	T	min	F	T	F
Ethernet OAM Remote loopback session started Syslog	Ethernet OAM loopback session stopped	Ethernet OAM Remote loopback session started	remote,started	oam	IPhysicalLayer	F	F	F	0	T	min	F	T	F
Ethernet OAM Local loopback session stopped Syslog	Ethernet OAM loopback session stopped	Ethernet OAM Local loopback session stopped	local,stopped	oam	IPhysicalLayer	F	F	F	0	T	min	F	T	F
Ethernet OAM Local loopback session started Syslog	Ethernet OAM loopback session stopped	Ethernet OAM Local loopback session started	local,started	oam	IPhysicalLayer	F	F	F	0	T	min	F	T	F
Ethernet OAM Session down Syslog	Ethernet OAM Session down Syslog	Ethernet OAM Session down Syslog	DOWN	oam	IPhysicalLayer	F	F	F	0	F	info	F	T	F
Ethernet OAM Session up Syslog	Ethernet OAM Session down Syslog	Ethernet OAM Session up Syslog	UP	oam	IPhysicalLayer	F	F	F	0	F	info	F	T	F
CFM cc error syslog	CFM cc error syslog	CFM cc error syslog	errors set		ICFMService	F	F	F	0	F	info	F	T	F
CFM cc error cleared syslog	CFM cc error syslog	CFM cc error cleared syslog	errors cleared		ICFMService	F	F	F	0	F	clr	F	T	F

Cisco IOS Syslog Registry Parameters

Table 43-7 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Cisco IOS syslogs shown in Table 43-2.

Table 43-7 Cisco IOS Registry Parameters  

Short Description	Event Type	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
Link down syslog	link down syslog	link down syslog		mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bun \dle-status/mpls traffic engineering tunnel information/ip interface oper status	IIPInterface	F	T	F	0	T	maj	F	T	T
Link up syslog	link down syslog	link up syslog		mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bun \dle-status/mpls traffic engineering tunnel information/ip interface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
FR DLCI down syslog	dlci change syslog	dlci down		N	IPhysicalLayer	T	T	F	0	T	maj	F	T	F
FR DLCI up syslog	dlci change syslog	dlci up		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
HSRP group change syslog	hsrp syslog	hsrp group change syslog		hsrp	IIPInterface	F	T	F	0	F	info	F	T	F
HSRP group restored syslog	hsrp syslog	hsrp group restored syslog		hsrp	IIPInterface	F	F	F	0	F	clr	F	T	F
SNMP message has not properly authenticated	snmp 5 snmp auth fail syslog	snmp 5 snmp auth fail syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
Memory allocation is not available	memory allocation syslog	memory allocation syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
process ran too long	process ran too long syslog	process ran too long syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
registered timer is expired	registered timer expired syslog	registered timer expired syslog		N	IManagedElement	F	T	F	0	F	min	F	T	F
EIGRP router query to neighbors timeouted syslog	EIGRP router query to neighbors timeouted syslog	EIGRP router query to neighbors timeouted syslog		N	IManagedElement	T	T	F	0	F	info	F	T	F
Ethernet cable is not connected	ethernet cable is not connected syslog	ethernet cable is not connected syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
frame with an invalid control code	frmr report syslog	frmr report syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Interface changed to non trunk	dtp 5 non port trunk syslog	dtp 5 non port trunk syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Line down syslog	line down syslog	line down syslog		basetech-lldp-neighbors-snmp/basetech-cdp-neighbors-snmp/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls trafficengineering tunnel information/port-status/ip interface oper status	IIPInterface	F	T	F	0	T	maj	F	T	T
Line up syslog	line down syslog	line up syslog		basetech-lldp-neighbors-snmp/basetech-cdp-neighbors-snmp/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls trafficengineering tunnel information/port-status/ip interface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
Cannot send incremental SAP update to peer	ipx 3 bad igrp sap syslog	ipx 3 bad igrp sap syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
An Ethernet cable is broken or unterminated	lance 5 coll syslog	lance 5 coll syslog		N	IManagedElement	F	T	F	0	F	info	F	T	F
An Ethernet transceiver is unplugged or defective	lance 5 late coll syslog	lance 5 late coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
Device configuration changed	sys 5 config i syslog	sys 5 config i syslog		N	IManagedElement	F	F	F	0	F	info	F	T	F
AppleTalk invalid network number	at 6 node wrong syslog	at 6 node wrong syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
security port shut down	security 1 port shut down syslog	security 1 port shut down syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
BPDU spanning-tree portfast enabled	span tree 2 rx port fast syslog	span tree 2 rx port fast syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Fault has been detected in a fiber Ethernet port connection	udld 3 disable syslog	udld 3 disable syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Unidirectional link detected	udld 3 disable fail syslog	udld 3 disable fail syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Fault has been detected in a fiber Ethernet connection	udld 4 one way path syslog	udld 4 one way path syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
OSPF neighbor down syslog	ospf neighbor syslog	ospf neighbor down syslog		N	IIPInterface	T	T	F	0	T	maj	F	T	F
OSPF neighbor up syslog	ospf neighbor syslog	ospf neighbor up syslog		N	IIPInterface	F	F	F	0	F	clr	F	T	F
No BPDUs were received on port	span tree 2 loop guard block syslog	span tree 2 loop guard block syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
BPDUs were received on port	span tree 2 loop guard un block syslog	span tree 2 loop guard un block syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Ethernet is seeing multiple collisions	amdp2 fe 5 coll syslog	amdp2 fe 5 coll syslog		N	IPhysicalLayer	F	T	F	0	F	info	F	T	F
Fast Ethernet packet has been dropped	dec 21140-5 coll syslog	dec 21140-5 coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
An Ethernet cable is broken	ilacc 5 coll syslog	ilacc 5 coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
pquicc 5 coll syslog: An Ethernet cable is broken	pquicc 5 coll syslog	pquicc 5 coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
pquicc ether 5 coll syslog: An Ethernet cable is broken	pquicc ether 5 coll syslog	pquicc ether 5 coll syslog		N	IManagedElement	F	F	F	0	T	min	F	T	F
Ethernet is detecting multiple collisions	pquicc fe 5 coll syslog	pquicc fe 5 coll syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
quicc ether 5 coll syslog: An Ethernet cable is broken	quicc ether 5 coll syslog	quicc ether 5 coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
Late collisions have occurred	amdp2 fe 5 latecoll syslog	amdp2 fe 5 latecoll syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
IS-IS neighbor down syslog	is is neighbor down syslog	is is neighbor down syslog		N	IPhysicalLayer	F	T	F	0	F	maj	F	T	F
IS-IS neighbor up syslog	is is neighbor down syslog	is is neighbor up syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Late collisions have occurred	dec 21140-5 late coll syslog	dec 21140-5 late coll syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
ilacc 5 late coll syslog: Late collisions have occurred	ilacc 5 late coll syslog	ilacc 5 late coll syslog		N	IManagedElement	F	F	F	0	T	min	F	T	F
pquicc 5 late coll syslog: Late collisions have occurred	pquicc 5 late coll syslog	pquicc 5 late coll syslog		N	IManagedElement	F	F	F	0	T	min	F	T	F
A new network may not have been engineered properly	pquicc ether 5 late coll syslog	pquicc ether 5 late coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
pquicc fe 5 late coll syslog: Late collisions have occurred	pquicc fe 5 late coll syslog	pquicc fe 5 late coll syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
quicc ether 5 late coll syslog: Late collisions have occurred	quicc ether 5 late coll syslog	quicc ether 5 late coll syslog		N	IManagedElement	F	F	F	0	T	min	F	T	F
Link trap down has occurred	snmp 5 link trap syslog	snmp 5 link trap down syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Link trap up has occurred	snmp 5 link trap syslog	snmp 5 link trap up syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
configured port changed state from learning to forwarding	snmp 5 top trap syslog	snmp 5 top trap syslog		N	IManagedElement	F	F	F	0	T	min	F	T	F
DUAL 5 neighbor down syslog	dual5 neighbor change	dual5 neighbor down		N	IPhysicalLayer	T	T	F	0	F	maj	F	T	F
DUAL 5 neighbor up syslog	dual5 neighbor change	dual5 neighbor up		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Link down syslog	link down syslog	link down syslog		ce-qinq-status-telnet/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls traffic engineering tunnel information/ipinterface oper status	IIPInterface	F	T	F	0	T	maj	F	T	T
Link up syslog	link down syslog	link up syslog		ce-qinq-status-telnet/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls traffic engineering tunnel information/ipinterface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
BGP neighbor down syslog	bgp neighbor down syslog	bgp neighbor down syslog		bgp neighbours	IMpBgpOid	F	T	F	0	T	maj	F	T	F
BGP neighbor up syslog	bgp neighbor down syslog	bgp neighbor up syslog		bgp neighbours	IMpBgpOid	F	F	F	0	F	clr	F	T	F
BGP neighbor down syslog	bgp neighbor down syslog	bgp neighbor down syslog		bgp neighbours	IMpBgpOid	F	T	F	0	T	maj	F	T	F
BGP neighbor up syslog	bgp neighbor down syslog	bgp neighbor up syslog		bgp neighbours	IMpBgpOid	F	F	F	0	F	clr	F	T	F
card in syslog	card out syslog	card in syslog		physical-command	IModule	F	F	F	0	F	clr	F	T	T
card out syslog	card out syslog	card out syslog		physical-command	IModule	F	T	F	0	T	maj	F	T	T
oir sp 3 power cycle syslog	oir sp 3 power cycle	oir sp 3 power cycle		N	IModule	F	F	F	0	F	info	F	T	F
Reloading device syslog	reloading device syslog	reloading device syslog		N	IManagedElement	F	F	T	200000	F	info	T	T	T
System restart	system restart syslog	system restart syslog		physical-command	IManagedElement	F	F	F	0	F	info	F	T	T
Interface changed to non trunk	dtp 5 non port trunk syslog	dtp 5 non port trunk syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Interface changed to trunk	dtp 5 non port trunk syslog	dtp 5 port trunk syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
ISDN connect syslog	isdn 6 connect syslog	isdn 6 connect syslog		N	IPhysicalLayer	F	T	F	0	T	maj	F	T	F
ISDN disconnect syslog	isdn 6 connect syslog	isdn 6 disconnect syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
ISDN connect syslog	isdn 6 connect syslog	isdn 6 connect syslog		N	IPhysicalLayer	F	T	F	0	T	maj	F	T	F
ISDN disconnect syslog	isdn 6 connect syslog	isdn 6 disconnect syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Duplex mismatch discovered	duplex mismatch	duplex mismatch		N	IPhysicalLayer	F	T	F	0	F	info	F	T	F
ISDN connect syslog	isdn 6 connect syslog	isdn 6 connect syslog		N	IPhysicalLayer	F	T	F	0	T	maj	F	T	F
ISDN disconnect syslog	isdn 6 connect syslog	isdn 6 disconnect syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
ISDN connect syslog	isdn 6 connect syslog	isdn 6 connect syslog		N	IPhysicalLayer	F	T	F	0	T	maj	F	T	F
ISDN disconnect syslog	isdn 6 connect syslog	isdn 6 disconnect syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
TDP neighbor down syslog	tdp neighbor down syslog	tdp neighbor down syslog		label switching table	ILseOid	F	T	F	0	T	maj	F	T	F
TDP neighbor up syslog	tdp neighbor down syslog	tdp neighbor up syslog		label switching table	ILseOid	F	F	F	0	T	clr	F	T	F
LDP neighbor down syslog	ldp neighbor down syslog	ldp neighbor down syslog		mpls interfaces	ILseOid	F	T	F	0	T	maj	F	T	F
LDP neighbor up syslog	ldp neighbor down syslog	ldp neighbor up syslog		mpls interfaces	ILseOid	F	F	F	0	F	clr	F	T	F
MPSL-TE tunnel reoptimized/rerouted syslog	mpls te tunnel reoptimized syslog	mpls te tunnel reoptimized syslog		N	IMplsTETunnel	T	T	F	0	F	info	T	T	F
MPLS TE tunnel down syslog	mpls te tunnel down syslog	mpls te tunnel down syslog		mpls traffic engineering tunnel information	IMplsTETunnel	F	T	F	0	T	maj	F	T	F
MPLS TE tunnel up syslog	mpls te tunnel down syslog	mpls te tunnel up syslog		mpls traffic engineering tunnel information	IMplsTETunnel	F	F	F	0	F	clr	F	T	F
MPLS TE tunnel down syslog	mpls te tunnel down syslog	mpls te tunnel down syslog		mpls traffic engineering tunnel information	IMplsTETunnel	F	T	F	0	T	maj	F	T	F
MPLS TE tunnel up syslog	mpls te tunnel down syslog	mpls te tunnel up syslog		mpls traffic engineering tunnel information	IMplsTETunnel	F	F	F	0	F	clr	F	T	F
A power supply is not working or has not been turned on	environment monitoring 2 supply syslog	environment monitoring 2 supply		N	IManagedElement	F	F	F	0	F	info	F	T	F
System restart	system sp restart syslog	system sp restart syslog		N	IManagedElement	F	F	F	0	F	info	F	T	F
Aggressive Mode Failure Detected	udld sp 4 disable syslog	udld sp 4 disable syslog		N	IPhysicalLayer	F	T	F	0	F	info	F	T	F
fabric sp 5 clear block down syslog	fabric sp 5 clear block off syslog	fabric sp 5 clear block off syslog		N	IPhysicalLayer	F	T	F	0	F	info	F	T	F
fabric sp 5 clear block up syslog	fabric sp 5 clear block off syslog	fabric sp 5 clear block on syslog		N	IPhysicalLayer	F	F	F	0	F	info	F	T	F
c6kenv sp 4 fan tray fail syslog	c6kenv sp 4 fan tray fail	c6kenv sp 4 fan tray fail		N	IManagedElement	F	F	F	0	F	info	F	T	F
pfredun sp 4 bootstring invalid syslog	pfredun sp 4 bootstring invalid	pfredun sp 4 bootstring invalid		N	IManagedElement	F	F	F	0	F	info	F	T	F
Power supply failed syslog	power supply failure syslog	power supply failed syslog		N	IPhysicalLayer	F	F	F	0	T	maj	F	T	F
Power supply okay syslog	power supply failure syslog	power supply okay syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
pm sp stdby 4 err disable syslog	pm sp stdby 4 err disable	pm sp stdby 4 err disable		N	IPhysicalLayer	F	F	F	0	F	info	F	T	F
HSRP group change syslog	hsrp syslog	hsrp group change syslog		hsrp	IPhysicalLayer	F	T	F	0	F	info	F	T	F
HSRP group restored syslog	hsrp syslog	hsrp group restored syslog		hsrp	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
BGP notification syslog	bgp notification syslog	bgp notification syslog		N	IPhysicalLayer	T	T	F	0	F	info	F	T	F
new ethernet channel interface for VSL connection	VSL-connection-new-interface-syslog	VSL connection new interface		N	IManagedElement	F	F	F	110000	F	info	T	T	F
VSL link up syslog	VSL-link-state-change-syslog	VSL link up syslog		N	IManagedElement	F	F	F	110000	F	info	T	T	F
VSL link down syslog	VSL-link-state-change-syslog	VSL link down syslog		N	IManagedElement	F	F	F	110000	F	info	T	T	F
VSL link up syslog: active switch is #1	VSL-link-state-change-syslog	VSL link up and switch 1 is active		N	IShelf	F	F	F	110000	F	info	T	T	F
VSL link up syslog: active switch is #2	VSL-link-state-change-syslog	VSL link up and switch 2 is active		N	IShelf	F	F	F	110000	F	info	T	T	F
role mismatch resolved syslog, sent from active switch #1	VSL-role-mismatch-resolved-syslog	VSL role mismatch resolved sent from active switch 1		N	IShelf	F	F	F	110000	F	info	T	T	F
role mismatch resolved syslog, sent from active switch #2	VSL-role-mismatch-resolved-syslog	VSL role mismatch resolved sent from active switch 2		N	IShelf	F	F	F	110000	F	info	T	T	F
env sp 4 fan tray fail syslog	env sp 4 fan tray fail	env sp 4 fan tray fail		N	IManagedElement	F	F	F	0	F	info	F	T	F
pwr sp 2 power supply fail syslog	pwr sp 2 power supply fail	pwr sp 2 power supply fail		N	IManagedElement	F	F	F	0	F	info	T	T	F
BGP neighbor down syslog	bgp neighbor down syslog	bgp neighbor down syslog		bgp neighbours, BFD	IMpBgpOid	F	T	F	0	T	maj	F	T	F
BGP neighbor up syslog	bgp neighbor down syslog	bgp neighbor up syslog		bgp neighbours, BFD	IMpBgpOid	F	F	F	0	F	clr	F	T	F
VRRP State Changed syslog	vrrp state changed syslog	vrrp state changed syslog		N	IManagedElement	F	F	F	0	F	info	T	T	F
Ima Link Status Change Down Syslog	Ima Link Status Change Down Syslog	Ima Link Status Change Down Syslog			IPhysicalLayer	F	T	F	0	T	maj	F	T	T
Ima Link Status Change Up Syslog	Ima Link Status Change Down Syslog	Ima Link Status Change Up Syslog			IPhysicalLayer	F	F	F	0	T	clr	F	T	T
IMA Active Link Change Syslog	IMA Active Link Change Syslog	IMA Active Link Change Syslog		mtop-ima-group-state,port-status	IMAGroupOid	F	F	F	0	F	info	F	T	F
Native VLAN mismatch discovered	native VLAN mismatch	native VLAN mismatch		N	IPhysicalLayer	F	T	F	0	F	info	F	T	F
Clock status change syslog	clock status change syslog	clock status change syslog		N	defaultClockDC	F	T	F	0	F	info	F	T	F
Clock source change syslog	clock source change syslog	clock source change syslog		N	defaultClockDC	F	T	F	0	F	info	F	T	F
pseudo wire tunnel down syslog	pseudo wire tunnel syslog	pseudo wire tunnel down syslog		ce-pw-tunnel-status-telnet	PTPLayer2MplsTunnel	F	T	F	0	T	min	F	T	T
pseudo wire tunnel up syslog	pseudo wire tunnel syslog	pseudo wire tunnel up syslog		ce-pw-tunnel-status-telnet	PTPLayer2MplsTunnel	F	F	F	0	F	clr	T	T	T
EFP service error disabled syslog	efp service error disabled syslog	efp service error disabled syslog		EFP status	IEFP	F	T	F	0	F	info	F	T	F
EFP down syslog	efp down syslog	efp down syslog		EFP status	IEFP	F	T	F	0	T	maj	F	T	F
EFP up syslog	efp down syslog	efp up syslog		EFP status	IEFP	F	T	F	0	F	clr	F	T	F
REP link not operational syslog	REP link operational status change	REP link not operational		Rep status	IREPService	F	T	F	0	T	min	F	T	F
REP link operational syslog	REP link operational status change	REP link operational		Rep status	IREPService	F	F	F	0	F	clr	F	T	F
OSPFv3 neighbor down syslog	ospfv3 neighbor syslog	ospfv3 neighbor down syslog	Down / DOWN	N	IManagedElement	T	T	F	0	T	maj	F	T	F
OSPFv3 neighbor up syslog	ospfv3 neighbor syslog	ospfv3 neighbor up syslog	Up / FULL	N	IManagedElement	F	F	F	0	T	clr	F	T	F
CFM enter AIS defect syslog	CFM enter AIS defect syslog	CFM enter AIS defect syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM exit AIS defect syslog	CFM enter AIS defect syslog	CFM exit AIS defect syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM enter AIS defect syslog	CFM enter AIS defect syslog	CFM enter AIS defect syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM exit AIS defect syslog	CFM enter AIS defect syslog	CFM exit AIS defect syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface enter AIS defect syslog	CFM interface enter AIS syslog	CFM interface enter AIS syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface exit AIS defect syslog	CFM interface exit AIS syslog	CFM interface exit AIS syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface enter AIS defect syslog	CFM interface enter AIS syslog	CFM interface enter AIS syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface exit AIS defect syslog	CFM interface exit AIS syslog	CFM interface exit AIS syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM enter LCK defect syslog	CFM enter LCK defect syslog	CFM enter LCK defect syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM exit LCK defect syslog	CFM enter LCK defect syslog	CFM exit LCK defect syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface enter LCK syslog	CFM interface enter LCK defect syslog	CFM interface enter LCK defect syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface exit LCK syslog	CFM interface enter LCK defect syslog	CFM interface exit LCK defect syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM Mep Down syslog	Mep Down syslog	Mep Down syslog	DOWN	N	ICfmMaintenanceAssociationOid	F	T	F	0	T	minor	F	T	F
CFM Mep Up syslog	Mep Down syslog	Mep Up syslog	UP	N	ICfmMaintenanceAssociationOid	F	F	F	0	F	clr	F	T	F
CFM Mep Down syslog	Mep Down syslog	Mep Down syslog	DOWN	N	ICfmMaintenanceAssociationOid	F	T	F	0	T	minor	F	T	F
CFM Mep Up syslog	Mep Down syslog	Mep Up syslog	UP	N	ICfmMaintenanceAssociationOid	F	F	F	0	F	clr	F	T	F
CFM Mep Down syslog	Mep Down syslog	Mep Down syslog	DOWN	N	ICfmMaintenanceAssociationOid	F	T	F	0	T	minor	F	T	F
CFM Mep Up syslog	Mep Down syslog	Mep Up syslog	UP	N	ICfmMaintenanceAssociationOid	F	F	F	0	F	clr	F	T	F
OSPFv3 neighbor down syslog	ospfv3 neighbor syslog	ospfv3 neighbor down syslog	Down / DOWN	N	IManagedElement	T	T	F	0	T	maj	F	T	F
OSPFv3 neighbor up syslog	ospfv3 neighbor syslog	ospfv3 neighbor up syslog	Up / FULL	N	IManagedElement	F	F	F	0	T	clr	F	T	F
Timing over packet application down syslog	timing over packet application down syslog	timing over packet application down syslog	down	N	IManagedElement	F	F	F	0	F	min	T	T	T
Timing over packet application up syslog	timing over packet application down syslog	timing over packet application up syslog	up	N	IManagedElement	F	F	F	0	F	clr	F	T	T
HSRP group change syslog	hsrp syslog	hsrp group change syslog		hsrp	IPhysicalLayer	F	T	F	0	F	info	F	T	F
HSRP group restored syslog	hsrp syslog	hsrp group restored syslog		hsrp	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Layer2 G709 alarm syslog	layer2 G709 alarm syslog	layer2 G709 alarm syslog	declared	N	DWDM Oid	F	F	F	0	T	wrn	F	T	F
Layer2 G709 clear syslog	layer2 G709 alarm syslog	layer2 G709 clear syslog	cleared	N	DWDM Oid	F	F	F	0	F	clr	F	T	F
Ethernet OAM Loopback Error syslog	EOAM Loopback Error syslog	EOAM Loopback Error syslog		N	IPhysicalLayer	F	F	F	0	F	info	F	T	F
Ethernet OAM Link Monitor syslog		EOAM Link Monitor syslog		N	IPhysicalLayer	F	F	F	0	F	info	F	T	F
Ethernet OAM Link Monitor high threshold syslog	EOAM Link Monitor high threshold syslog	EOAM Link Monitor high threshold syslog		N	IPhysicalLayer	F	F	F	0	F	info	F	T	F
Ethernet OAM exited the session	Ethernet OAM Session Syslog	EOAM exit session	EXIT	N	IPhysicalLayer	F	F	F	0	F	info	F	T	F
Ethernet OAM entered the session	Ethernet OAM Session Syslog	EOAM enter session	ENTER	N	IPhysicalLayer	F	F	F	0	F	info	F	T	F
Ethernet OAM Link timeout Syslog	Ethernet OAM Link timeout Syslog	Ethernet OAM Link timeout Syslog		N	IPhysicalLayer	F	F	F	0	F	info	F	T	F
VRRP backup to master syslog	vrrp state changed syslog	vrrp backup to master syslog	Backup	N	IManagedElement	F	F	F	0	F	info	T	T	F
VRRP master to backup syslog	vrrp state changed syslog	vrrp master to backup syslog	Master	N	IManagedElement	F	F	F	0	F	info	T	T	F
ELMI Vlan configured syslog	ELMI Vlan not configured syslog	ELMI Vlan configured syslog	CONFIGURED	N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
ELMI Vlan not configured syslog	ELMI Vlan not configured syslog	ELMI Vlan not configured syslog	NOT_CONFIGURED	N	IPhysicalLayer	F	F	F	0	F	min	T	T	F
ELMI Vlan disabled syslog	ELMI Vlan disabled syslog	ELMI Vlan disabled syslog	DISABLE	N	IPhysicalLayer	F	F	F	0	F	min	T	T	F
ELMI Vlan enabled syslog	ELMI Vlan disabled syslog	ELMI Vlan enabled syslog	RECOVER	N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
EOAM RFI dying gasp syslog - admin shutdown on peer	EOAM rfi dying gasp failure syslog	admin shutdown on peer	remote client down	oam	IPhysicalLayer	F	T	F	0	T	min	F	T	F
EOAM RFI dying gasp syslog - no ethernet oam	EOAM rfi dying gasp failure syslog	no ethernet oam	remote client administratively turned off	oam	IPhysicalLayer	F	T	F	0	T	min	F	T	F
EOAM RFI dying gasp syslog - admin reload on peer	EOAM rfi dying gasp failure syslog	admin reload on peer	remote client reloaded	oam	IPhysicalLayer	F	T	F	0	T	min	F	T	F
EOAM RFI dying gasp syslog - no org specific TLV	EOAM rfi dying gasp failure syslog	no org specific TLV	dying gasp	oam	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Eoam RFI dying gasp clear syslog	EOAM rfi dying gasp failure syslog	dying gasp clear syslog		oam	IPhysicalLayer	F	F	F	0	T	clr	F	T	F
EOAM RFI link fault syslog	EOAM rfi link fault syslog	EOAM rfi link fault syslog		oam	IPhysicalLayer	F	T	F	0	T	min	F	T	F
EOAM RFI link fault clear syslog	EOAM rfi link fault syslog	EOAM rfi link fault clear syslog		oam	IPhysicalLayer	F	F	F	0	T	clr	F	T	F
PM Error disable syslog	PM Error disable syslog	PM Error disable syslog		oam	IPhysicalLayer	F	T	F	0	T	maj	F	T	F
PM Error recover syslog	PM Error disable syslog	PM Error recover syslog		oam	IPhysicalLayer	F	F	F	0	T	clr	F	T	F
PM SP Error disable syslog	PM SP Error disable syslog	PM SP Error disable syslog		oam	IPhysicalLayer	F	T	F	0	T	maj	F	T	F
Eoam entered master loopback mode syslog	EOAM loopback syslog	Enter master loopback mode	entered,master	oam	IPhysicalLayer	F	F	F	0	T	min	F	T	F
Eoam exited master loopback mode syslog	EOAM loopback syslog	Exit master loopback mode	exited,master	oam	IPhysicalLayer	F	F	F	0	T	min	F	T	F
Eoam entered slave loopback mode syslog	EOAM loopback syslog	Enter slave loopback mode	entered,slave	oam	IPhysicalLayer	F	F	F	0	T	min	F	T	F
Eoam exited slave loopback mode syslog	EOAM loopback syslog	Exit slave loopback mode	exited,slave	oam	IPhysicalLayer	F	F	F	0	T	min	F	T	F
Transceiver inserted syslog	transceiver removed syslog	transceiver inserted syslog		physical-command	IPortConnector	F	F	F	0	F	clr	T	T	F
Transceiver removed syslog	transceiver removed syslog	transceiver removed syslog		physical-command	IPortConnector	F	F	F	0	F	maj	T	T	F
card in syslog	card out syslog	card in syslog		physical-command	IModule	F	F	F	0	F	clr	F	T	T
card out syslog	card out syslog	card out syslog		physical-command	IModule	F	T	F	0	T	maj	F	T	T

Cisco IOX Syslog Registry Parameters

Table 43-8 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Cisco IOX syslogs shown in Table 43-3.

Table 43-8 Cisco IOX Registry Parameters  

Short Description	Event Type	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
Link down syslog	link down syslog	link down syslog	down / Down	ce-qinq-status-telnet/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls traffic engineering tunnel information/ipinterface oper status	IIPInterface	F	T	F	0	T	maj	F	T	T
Link up syslog	link down syslog	link up syslog	up / Up	ce-qinq-status-telnet/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls traffic engineering tunnel information/ipinterface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
Link down syslog	link down syslog	link down syslog	down / Down	ip interface oper status	IIPInterface	F	T	F	0	T	maj	F	T	T
Link up syslog	link down syslog	link up syslog	up / Up	mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls traffic engineering tunnel information/ip interface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
Line down syslog	line down syslog	line down syslog	down / Down	mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mpls traffic engineering tunnel information / port-status/ip interface oper status	IPortLayer1	F	T	F	0	T	maj	F	T	T
Line up syslog	line down syslog	line up syslog	up / Up	mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mpls traffic engineering tunnel information / port-status/ip interface oper status	IPortLayer1	F	F	F	0	F	clr	F	T	T
OSPF neighbor down syslog	ospf neighbor syslog	ospf neighbor down syslog	Down	N	IIPInterface	T	T	F	0	T	maj	F	T	F
OSPF neighbor up syslog	ospf neighbor syslog	ospf neighbor up syslog	Up / LOADING to FULL	N	IIPInterface	F	F	F	0	F	clr	F	T	F
envmon powersupply syslog	envmon powersupply syslog	envmon powersupply syslog	N/A	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon condition syslog	envmon condition syslog	envmon condition syslog	ENV_CONDITION	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon condition clear syslog	envmon condition syslog	envmon condition clear syslog	ENV_CONDITION_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon fan syslog	envmon fan syslog	envmon fan syslog	FAN	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon fan clear syslog	envmon fan syslog	envmon fan clear syslog	FAN_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon fan syslog	envmon fan syslog	envmon fan syslog	N/A	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon tempretaure syslog	envmon tempretaure syslog	envmon tempretaure syslog	OVERTEMP	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon tempretaure clear syslog	envmon tempretaure syslog	envmon tempretaure clear syslog	OVERTEMP_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
card out syslog	card out syslog	card out syslog	REMOVE	physical-command	IManagedElement	F	T	F	0	T	maj	F	T	T
card in syslog	card out syslog	card in syslog	INSERT	physical-command	IManagedElement	F	F	F	0	F	clr	F	T	T
envmon powersupply syslog	envmon powersupply syslog	envmon powersupply syslog	POWERSUPPLY_CURRENT	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon powersupply clear syslog	envmon powersupply syslog	envmon powersupply clear syslog	POWERSUPPLY_CURRENT_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon powersupply syslog	envmon powersupply syslog	envmon powersupply syslog	POWERSUPPLY_NONOP	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon powersupply clear syslog	envmon powersupply syslog	envmon powersupply clear syslog	POWERSUPPLY_NONOP_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon powersupply syslog	envmon powersupply syslog	envmon powersupply syslog	POWERSUPPLY_VOLTAGE	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon powersupply clear syslog	envmon powersupply syslog	envmon powersupply clear syslog	POWERSUPPLY_VOLTAGE_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon tempretaure syslog	envmon tempretaure syslog	envmon tempretaure syslog	TEMP	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon tempretaure clear syslog	envmon tempretaure syslog	envmon tempretaure clear syslog	TEMP_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon powersupply syslog	envmon powersupply syslog	envmon powersupply syslog	VOLTAGE	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon powersupply clear syslog	envmon powersupply syslog	envmon powersupply clear syslog	VOLTAGE_CLEAR-	N	IManagedElement	F	F	F	0	F	clr	F	T	F
fabric hardware syslog	fabric hardware syslog	fabric hardware syslog	FIAHW_LOS	N	IManagedElement	F	T	T	0	T	maj	F	T	F
fabric hardware clear syslog	fabric hardware syslog	fabric hardware clear syslog	FIAHW_LOS_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
flash card removed syslog	flash card removed syslog	flash card removed syslog	UNAVAILABLE	N	IManagedElement	F	T	T	0	T	maj	F	T	F
flash card inserted syslog	flash card removed syslog	flash card inserted syslog	SWAPPED	N	IManagedElement	F	F	F	0	F	clr	F	T	F
Memory allocation is not available	memory allocation syslog	memory allocation syslog	N/A	N	IManagedElement	F	T	F	0	T	min	F	T	F
Module reset syslog	reset module syslog	reset module syslog	N/A	N	IManagedElement	F	T	T	0	F	info	T	T	T
Card oper status changed	card down syslog	card down syslog	UNPOWERED / DOWN / BRINGDOWN / NOT / DISABLED	card status	IModule	F	T	F	0	T	min	F	T	T
Card oper status changed	card down syslog	card up syslog	IOS XR RUN / OK	card status	IModule	F	F	F	0	F	clr	F	T	T
card out syslog	card out syslog	card out syslog	OIROUT	physical-command	IModule	F	T	F	0	T	maj	F	T	T
card in syslog	card out syslog	card in syslog	OIRIN	N	IModule	F	F	F	0	F	clr	F	T	T
card out syslog	card out syslog	card out syslog	OIROUT	physical-command	IModule	F	T	F	0	T	maj	F	T	T
card in syslog	card out syslog	card in syslog	OIRIN	N	IModule	F	F	F	0	F	clr	F	T	T
pim neighbor loss syslog	pim neighbor loss syslog	pim neighbor loss syslog	DOWN	N	IIPInterface	F	T	F	0	F	maj	F	T	F
pim neighbor up syslog	pim neighbor loss syslog	pim neighbor up syslog	UP	N	IIPInterface	F	F	F	0	F	clr	F	T	F
pim interface down syslog	pim interface down syslog	pim interface down syslog	DOWN	N	IManagedElement	F	T	F	0	T	maj	F	T	F
pim interface up syslog	pim interface down syslog	pim interface up syslog	UP	N	IManagedElement	F	F	F	0	F	clr	F	T	F
pim invalid join syslog	pim invalid join syslog	pim invalid join syslog	N/A	N	IManagedElement	F	T	F	0	T	min	F	T	F
Card oper status changed	card down syslog	card down syslog	off	N	IManagedElement	F	T	F	0	T	min	F	T	T
Card oper status changed	card down syslog	card up syslog	on	N	IManagedElement	F	F	F	0	F	clr	F	T	T
Line down syslog	line down syslog	line down syslog	N/A	N	IPortLayer1	F	T	F	0	T	maj	F	T	T
Line up syslog	line down syslog	line up syslog	cleared	N	IPortLayer1	F	F	F	0	F	clr	F	T	T
card out syslog	card out syslog	card out syslog	REMOVED	physical-command	IModule	F	T	F	0	T	maj	F	T	T
card in syslog	card out syslog	card in syslog	INSERTED	N	IModule	F	F	F	0	F	clr	F	T	T
LDP neighbor down syslog	ldp neighbor down syslog	ldp neighbor down syslog	DOWN	mpls interfaces, label switching table, mpls-ldp-peers	IProfileContainer (LSE)	F	T	F	0	T	maj	F	T	F
LDP neighbor up syslog	ldp neighbor down syslog	ldp neighbor up syslog	UP	mpls interfaces, label switching table, mpls-ldp-peers	IProfileContainer (LSE)	F	F	F	0	F	clr	F	T	F
BGP neighbor down syslog	bgp neighbor down syslog	bgp neighbor down syslog	down / Down	bgp neighbours	IBgpNeighbourEntry	F	T	F	0	T	maj	F	T	F
BGP neighbor up syslog	bgp neighbor down syslog	bgp neighbor up syslog	up / Up	bgp neighbours	IBgpNeighbourEntry	F	F	F	0	F	clr	F	T	F
Login authentication failed syslog	login authentication failed syslog	login authentication failed syslog	N/A	N	IManagedElement	F	F	F	0	F	min	T	T	F
If-Table in sync syslog	if table in sync syslog	if table in sync syslog	N/A	physical-command	IModule	F	T	F	0	F	info	F	T	F
bfd session down syslog	bfd session down syslog	bfd session down syslog	down	bfd session	IBfdService	F	T	F	0	T	maj	F	T	F
bfd session removed syslog	bfd session down syslog	bfd session removed syslog	removed	bfd session	IBfdService	F	T	F	0	T	maj	F	T	F
bfd session up syslog	bfd session down syslog	bfd session up syslog	up	bfd session	IBfdService	F	F	F	0	F	clr	F	T	F
Layer2 G709 alarm syslog	layer2 G709 alarm syslog	layer2 G709 alarm syslog	N/A	N	DWDM Oid	F	F	F	0	T	wrn	F	T	F
Layer2 G709 clear syslog	layer2 G709 alarm syslog	layer2 G709 clear syslog	cleared	N	DWDM Oid	F	F	F	0	F	clr	F	T	F
Layer2 dwdm info syslog	layer2 dwdm info syslog	layer2 dwdm info syslog	N/A	N	IManagedElement	F	F	F	0	T	min	F	T	F
Layer1 PM TCA syslog	layer1 PM TCA syslog	layer1 PM TCA syslog	N/A	N	DWDM Oid	F	F	F	0	T	wrn	F	T	F
Layer2 SPA failure syslog	layer2 SPA failure syslog	layer2 SPA failure syslog	N/A	N	IManagedElement	F	T	F	0	T	min	F	T	F
OSPF routing neighbor down syslog	ospf routing neighbor syslog	ospf routing neighbor down syslog	Down/DOWN	N	IIPInterface	T	T	F	0	F	maj	T	T	F
OSPF routing neighbor up syslog	ospf routing neighbor syslog	ospf routing neighbor up syslog	Up / LOADING to FULL	N	IIPInterface	F	F	F	0	F	clr	F	T	F
OSPFv3 neighbor down syslog	ospfv3 neighbor syslog	ospfv3 neighbor down syslog	Down / DOWN	N	IManagedElement	T	T	F	0	T	maj	F	T	F
OSPFv3 neighbor up syslog	ospfv3 neighbor syslog	ospfv3 neighbor up syslog	Up / FULL	N	IManagedElement	F	F	F	0	F	clr	F	T	F
OSPFv3 routing neighbor down syslog	ospfv3 routing neighbor down syslog	ospfv3 routing neighbor down syslog	Down / DOWN	N	IManagedElement	F	T	F	0	T	maj	F	T	F
OSPFv3 routing neighbor up syslog	ospfv3 routing neighbor down syslog	ospfv3 routing neighbor up syslog	Up / FULL	N	IManagedElement	F	F	F	0	T	clr	F	T	F
Routing BGP neighbor down syslog	routing bgp neighbor down syslog	routing bgp neighbor down syslog	down / Down	N	IBgpNeighbourEntry	F	T	F	0	T	maj	F	T	F
Routing BGP neighbor up syslog	routing bgp neighbor down syslog	routing bgp neighbor up syslog	up / Up	N	IBgpNeighbourEntry	F	F	F	0	F	clr	F	T	F
IPv6 Routing BGP neighbor down syslog	ipv6 routing bgp neighbor down syslog	ipv6 routing bgp neighbor down syslog	down / Down	N	IManagedElement	F	T	F	0	T	maj	F	T	F
IPv6 Routing BGP neighbor up syslog	ipv6 routing bgp neighbor down syslog	ipv6 routing bgp neighbor up syslog	up / Up	N	IManagedElement	F	F	F	0	T	clr	F	T	F
pseudo wire tunnel down syslog	pseudo wire tunnel syslog	pseudo wire tunnel down syslog		ce-pw-tunnel-status-telnet	PTPLayer2MplsTunnel	F	T	F	0	T	min	F	T	T
pseudo wire tunnel up syslog	pseudo wire tunnel syslog	pseudo wire tunnel up syslog		ce-pw-tunnel-status-telnet	PTPLayer2MplsTunnel	F	F	F	0	T	clr	F	T	T
EFP service error disabled syslog	efp service error disabled syslog	efp service error disabled syslog		EFP status	IEFP	F	T	F	0	F	info	F	T	F
DWDM feature not implemented yet	Dwdm not implemented syslog	Dwdm not implemented syslog		N	IManagedElement	F	F	F	0	T	wrn	false	T	F
DWDM fatal error with reason and error number	DWDM fatal error 2 syslog	DWDM fatal error 2 syslog		N	IManagedElement	F	F	F	0	T	maj	false	T	F
DWDM fatal error with reason	DWDM fatal error syslog	DWDM fatal error 2 syslog		N	IManagedElement	F	F	F	0	T	maj	false	T	F
PLIM EIO training errors syslog	PLIM EIO training errors syslog	PLIM EIO training errors syslog		N	IManagedElement	F	F	F	0	T	maj	false	T	F
PLIM Checkpoint Initialization Failure syslog	PLIM check point failure syslog	PLIM check point failure syslog		N	IManagedElement	F	F	F	0	T	min	false	T	F
PLIM ASIC error syslog	PLIM asic error syslog	PLIM asic error syslog		N	IManagedElement	F	F	F	0	T	min	false	T	F
PLIM memory error syslog	PLIM memory error syslog	PLIM memory error syslog		N	IManagedElement	F	F	F	0	T	maj	false	T	F
PLIM squid error syslog	PLIM squid error syslog	PLIM squid error syslog		N	IManagedElement	F	F	F	0	T	min	false	T	F
PLIM 7 error syslog	PLIm 7b error syslog	PLIm 7b error syslog		N	IManagedElement	F	F	F	0	T	min	false	T	F
PLIM OC768 critical error syslog	PLIM OC768 critical error syslog	PLIM OC768 critical error syslog		N	IManagedElement	F	F	F	0	T	maj	false	T	F
PLIM OC768 INFO syslog	PLIM OC768 INFO syslog	PLIM OC768 INFO syslog		N	IManagedElement	F	F	F	0	T	info	false	T	F
PLIM OC768 debug syslog	PLIM OC768 debug syslog	PLIM OC768 debug syslog		N	IManagedElement	F	F	F	0	T	info	false	T	F
BGP notification syslog	bgp notification syslog	bgp notification syslog		N	IPhysicalLayer	T	T	F	0	F	info	F	T	F
BGP notification syslog	bgp notification syslog	bgp notification syslog		N	IPhysicalLayer	T	T	F	0	F	info	F	T	F
routing ISIS neighbor down syslog	routing isis neighbor down syslog	routing isis neighbor down syslog	Down	N	IPhysicalLayer	F	T	F	0	F	maj	F	T	F
routing ISIS neighbor up syslog	routing isis neighbor down syslog	routing isis neighbor up syslog	Up	N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Backup to Master change syslog	Backup to Master syslog	Backup to Master syslog	Backup	N	IIPInterface	F	F	F	0	F	info	T	T	F
Master to Backup change syslog	Backup to Master syslog	Master to Backup syslog	Master	N	IIPInterface	F	F	F	0	F	info	T	T	F
IP standby state change syslog	IP standby state change syslog	IP standby state change syslog	Init, Disabled	hsrp	IPInterface	F	T	F	0	F	minor	F	T	F
IP standby state restored syslog	IP standby state change syslog	IP standby state restored syslog	!=Init, Disabled	hsrp	IPInterface	F	T	F	0	F	clr	F	T	F
DWDM5 SRLG OVERFLOW syslog	DWDM5 SRLG OVERFLOW syslog	DWDM5 SRLG OVERFLOW syslog		N	IManagedElement	F	F	F	0	T	wrn	false	T	F

Cisco ACE Syslog Registry Parameters

Table 43-9 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Cisco ACE syslogs shown in Table 43-4.

Table 43-9 Cisco ACE Syslog Registry Parameters  

Short Description	Event Type	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
Link down syslog	link down syslog	link down syslog		ip interface oper status	IIPInterface	F	T	F	0	T	min	F	T	T
Link up syslog	link down syslog	link up syslog		ip interface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
Link down syslog	link down syslog	link down syslog		ip interface oper status	IIPInterface	F	T	F	0	T	min	F	T	T
Link up syslog	link down syslog	link up syslog		ip interface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
Deny protocol reverse path check	ACE-106021-syslog	ACE-106021-syslog				F	F	F	0	T	maj	F	T	F
Access rule memory exhausted	ACE-106028-syslog	ACE-106028-syslog				F	F	F	0	T	maj	F	T	F
License manager exiting	ACE-444006-syslog	ACE-444006-syslog				F	F	F	0	T	maj	F	T	F
The ACE attempted to start or set up the application acceleration core daemon process	ACE-456029-syslog	ACE-456029-syslog				F	F	F	0	T	maj	F	T	F
Critical shared memory setup failure	ACE-456078-syslog	ACE-456078-syslog				F	F	F	0	T	maj	F	T	F
Critical Semaphore related errors	ACE-456080-syslog	ACE-456080-syslog				F	F	F	0	T	maj	F	T	F
A generic alert-level message	ACE-456085-syslog	ACE-456085-syslog				F	F	F	0	T	info	F	T	F
The ACE initialization has failed	ACE-456086-syslog	ACE-456086-syslog				F	F	F	0	T	maj	F	T	F
Peer IP address is not reachable	ACE-727001-syslog	ACE-727001-syslog				F	F	F	0	T	maj	F	T	F
Peer device is not reachable on an FT Interface	ACE-727002-syslog	ACE-727002-syslog				F	F	F	0	T	maj	F	T	F
Mismatch incontext names detected for FTgroup	ACE-727003-syslog	ACE-727003-syslog				F	F	F	0	T	maj	F	T	F
Both devices were detected to be Active for the same FT group	ACE-727004-syslog	ACE-727004-syslog				F	F	F	0	T	maj	F	T	F
Configuration could not be synced to the peer device	ACE-727005-syslog	ACE-727005-syslog				F	F	F	0	T	maj	F	T	F
Peer is incompatible	ACE-727006-syslog	ACE-727006-syslog				F	F	F	0	T	maj	F	T	F
Module Initialization failure	ACE-727007-syslog	ACE-727007-syslog				F	F	F	0	T	maj	F	T	F
Failed to send heartbeats to peer	ACE-727008-syslog	ACE-727008-syslog				F	F	F	0	T	maj	F	T	F
Initialization failure - general	ACE-728001-syslog	ACE-728001-syslog				F	F	F	0	T	maj	F	T	F
Initialization failure - sticky	ACE-728002-syslog	ACE-728002-syslog				F	F	F	0	T	maj	F	T	F
Initialization failure - sticky hash	ACE-728003-syslog	ACE-728003-syslog				F	F	F	0	T	maj	F	T	F
The CLI end of line (EOL) function	ACE-100001-syslog	ACE-100001-syslog				F	F	F	0	T	maj	F	T	F
Reload started	ACE-199006-syslog	ACE-199006-syslog				F	F	F	0	T	maj	F	T	F
SNMPD initialization failed	ACE-212007-syslog	ACE-212007-syslog				F	F	F	0	T	maj	F	T	F
ICMP Manager Initialization Failed	ACE-313006-syslog	ACE-313006-syslog				F	F	F	0	T	maj	F	T	F
System experienced fatal failure	ACE-443001-syslog	ACE-443001-syslog				F	F	F	0	T	maj	F	T	F
License checkout failure	ACE-444001-syslog	ACE-444001-syslog				F	F	F	0	T	maj	F	T	F
Evaluation license expired	ACE-444004-syslog	ACE-444004-syslog				F	F	F	0	T	maj	F	T	F
Invalid stream	ACE-456014-syslog	ACE-456014-syslog				F	F	F	0	T	maj	F	T	F
Critical error parsing ACC module configuration	ACE-456090-syslog	ACE-456090-syslog				F	F	F	0	T	maj	F	T	F
Communication failure	ACE-727009-syslog	ACE-727009-syslog				F	F	F	0	T	maj	F	T	F
Data replication failed and not synced to the peer device	ACE-727010-syslog	ACE-727010-syslog				F	F	F	0	T	maj	F	T	F
Configuration synchronization does not occurred	ACE-727011-syslog	ACE-727011-syslog				F	F	F	0	T	maj	F	T	F
The state transitions made by an HA state device for a context.	ACE-727012-syslog	ACE-727012-syslog				F	F	F	0	T	info	F	T	F
The peer is now reachable	ACE-727013-syslog	ACE-727013-syslog				F	F	F	0	T	info	F	T	F
The redundancy heartbeats from a peer have become unidirectional	ACE-727014-syslog	ACE-727014-syslog				F	F	F	0	T	maj	F	T	F
Detected mismatch in heartbeat interval from the peer	ACE-727015-syslog	ACE-727015-syslog				F	F	F	0	T	info	F	T	F
The replication is being carried out to a peer	ACE-727016-syslog	ACE-727016-syslog				F	F	F	0	T	info	F	T	F
ACE FT Track UP syslog	ACE FT Track down syslog	ACE FT Track up syslog				F	F	F	0	T	clr	F	T	F
ACE FT Track DOWN syslog	ACE FT Track down syslog	ACE FT Track down syslog				F	F	F	0	T	maj	F	T	F
Drop connection as Application Acceleration Maximum	ACE-LB_General-728033-syslog	ACE-LB_General-728033-syslog				F	F	F	0	T	info	F	T	F
Disabled Web Application Acceleration	ACE-LB_General-728035-syslog	ACE-LB_General-728035-syslog				F	F	F	0	T	info	F	T	F
Enabled Web Application Acceleration	ACE-LB_General-728036-syslog	ACE-LB_General-728036-syslog				F	F	F	0	T	info	F	T	F

Cisco Nexus Syslog Registry Parameters

Table 43-10 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Cisco Nexus syslogs shown in Table 43-5.

Table 43-10 Cisco Nexus Syslog Registry Parameters  

Short Description	Event Type	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
HSRP group change syslog	hsrp syslog	hsrp group change syslog	Init	NA	ME	F	T	F	0	F	info	F	T	F
HSRP group restored syslog	hsrp syslog	hsrp group restored syslog	Active,Standby	NA	ME	F	F	F	0	F	clr	F	T	F
BGP neighbor down syslog	bgp neighbor down syslog	bgp neighbor down syslog	Down	NA	ME	F	T	F	0	T	maj	F	T	F
BGP neighbor up syslog	bgp neighbor down syslog	bgp neighbor up syslog	Up	NA	ME	F	F	F	0	F	clr	F	T	F
OSPF neighbor down syslog	ospf neighbor syslog	ospf neighbor down syslog	DOWN	NA	ME	T	T	F	0	T	maj	F	T	F
OSPF neighbor up syslog	ospf neighbor syslog	ospf neighbor up syslog	FULL	NA	ME	F	F	F	0	F	clr	F	T	F