This chapter provides detailed information about the syslogs for third-party devices in Cisco ANA. Syslogs appear in the Cisco ANA EventVision Syslog tab. (For information about Cisco ANA EventVision, see the Cisco Active Network Abstraction 3.7.2 User Guide.) Syslog information is presented in two forms:
•Syslog Tables: A section devoted to the supported syslogs for each NOS platform (e.g., Juniper E-Series Syslogs). Each of these sections contains a table listing the name of each supported syslog, along with a description, the raw format of the syslog string, and a short description. In the syslog tables in this Reference, each syslog's short description is also a link to its corresponding registry parameters.
•Registry Parameter Tables: A section devoted to the event types, event subtypes and Cisco ANA registry parameters for the supported syslogs. There is one parameter table for every syslog table (e.g., Juniper E-Series Syslogs Registry Parameters). Each syslog can have multiple event subtypes, or states. The parameter tables indicate when each state is generated, and how Cisco ANA processes them (such as their severity, whether they are ticketable, can be correlated, are autocleared, and so on).
Cisco ANA 3.7.x users can enable an additional IP in the device for traps and syslogs. This new feature is called Multisource Events. When Cisco ANA 3.7.x receives a trap or syslog from that device (from the new IP) it will still recognize the device. For more details on multisource events see Cisco ANA 3.7.1 Release Notes.
1) RPD_BGP_NEIGHBOR_STATE_CHANGED: BGP peer 80.80.80.8 (Internal AS 65520) changed state from Established to Idle (event Closed) 2) RPD_BGP_NEIGHBOR_STATE_CHANGED: BGP peer 80.80.80.8 (Internal AS 65520) changed state from OpenConfirm to Established (event RecvKeepAlive)
Sep 5 17:09:10 rpd[3161]: RPD_BGP_NEIGHBOR_STATE_CHANGED: BGP peer 80.80.80.8 (Internal AS 65520) changed state from OpenConfirm to Established (event RecvKeepAlive)
Table 11-2 lists the Juniper JCS Control System Syslogs supported in Cisco ANA.
Table 11-2 Juniper JCS Control SystemSyslogs
Syslog Name
Description
Raw Format
Short Description
RPD_BGP_NEIGHBOR_STATE_CHANGED
During BGP negotiation with the local router, the state of the indicated BGP neighbor (peer) changed as indicated. The ESTABLISHED state is the final state in the neighbor negotiation
Sep 5 17:08:26 rpd[3161]: RPD_BGP_NEIGHBOR_STATE_CHANGED: BGP peer 80.80.80.8 (Internal AS 65520) changed state from Established to Idle (event Closed)
During BGP negotiation with the local router, the state of the indicated BGP neighbor (peer) changed as indicated. The ESTABLISHED state is the final state in the neighbor negotiation.
Sep 5 17:09:10 rpd[3161]: RPD_BGP_NEIGHBOR_STATE_CHANGED: BGP peer 80.80.80.8 (Internal AS 65520) changed state from OpenConfirm to Established (event RecvKeepAlive)
A Label Distribution Protocol (LDP) adjacency was terminated because the indicated neighbor stopped communicating. If the adjacency was the only one with this neighbor, the routing protocol process (rpd) terminated the associated LDP session.
RPD_LDP_NBRDOWN: LDP neighbor 10.110.1.5 (so-0/3/1.20) is down
A Label Distribution Protocol (LDP) adjacency with the indicated neighbor became active. The routing protocol process (rpd) established an LDP session with the neighbor if one did not already exist.
RPD_LDP_NBRUP: LDP neighbor 10.110.1.5 (so-0/3/1.20) is up
An OSPF adjacency with the indicated neighboring router was terminated. The local router no longer exchanges routing information with, or directs traffic to, the neighboring router.
RPD_OSPF_NBRDOWN: OSPF neighbor 10.111.1.9 (fe-0/0/3.0) state changed from Full to Down due to Kill all neighbors
Table 11-3 lists the Juniper M-Series Syslogs supported in Cisco ANA.
Table 11-3 Juniper M-Series Syslogs
Syslog Name
Description
Raw Format
Short Description
RPD_BGP_NEIGHBOR_STATE_CHANGED
During BGP negotiation with the local router, the state of the indicated BGP neighbor (peer) changed as indicated. The ESTABLISHED state is the final state in the neighbor negotiation
Sep 5 17:08:26 rpd[3161]: RPD_BGP_NEIGHBOR_STATE_CHANGED: BGP peer 80.80.80.8 (Internal AS 65520) changed state from Established to Idle (event Closed)
During BGP negotiation with the local router, the state of the indicated BGP neighbor (peer) changed as indicated. The ESTABLISHED state is the final state in the neighbor negotiation.
Sep 5 17:09:10 rpd[3161]: RPD_BGP_NEIGHBOR_STATE_CHANGED: BGP peer 80.80.80.8 (Internal AS 65520) changed state from OpenConfirm to Established (event RecvKeepAlive)
A Label Distribution Protocol (LDP) adjacency was terminated because the indicated neighbor stopped communicating. If the adjacency was the only one with this neighbor, the routing protocol process (rpd) terminated the associated LDP session.
RPD_LDP_NBRDOWN: LDP neighbor 10.110.1.5 (so-0/3/1.20) is down
A Label Distribution Protocol (LDP) adjacency with the indicated neighbor became active. The routing protocol process (rpd) established an LDP session with the neighbor if one did not already exist.
RPD_LDP_NBRUP: LDP neighbor 10.110.1.5 (so-0/3/1.20) is up
An OSPF adjacency with the indicated neighboring router was terminated. The local router no longer exchanges routing information with, or directs traffic to, the neighboring router.
RPD_OSPF_NBRDOWN: OSPF neighbor 10.111.1.9 (fe-0/0/3.0) state changed from Full to Down due to Kill all neighbors
Table 11-4 lists the Juniper MX-Series Syslogs supported in Cisco ANA.
Table 11-4 Juniper MX-Series Syslogs
Syslog Name
Description
Raw Format
Short Description
RPD_BGP_NEIGHBOR_STATE_CHANGED
During BGP negotiation with the local router, the state of the indicated BGP neighbor (peer) changed as indicated. The ESTABLISHED state is the final state in the neighbor negotiation
Sep 5 17:08:26 rpd[3161]: RPD_BGP_NEIGHBOR_STATE_CHANGED: BGP peer 80.80.80.8 (Internal AS 65520) changed state from Established to Idle (event Closed)
During BGP negotiation with the local router, the state of the indicated BGP neighbor (peer) changed as indicated. The ESTABLISHED state is the final state in the neighbor negotiation.
Sep 5 17:09:10 rpd[3161]: RPD_BGP_NEIGHBOR_STATE_CHANGED: BGP peer 80.80.80.8 (Internal AS 65520) changed state from OpenConfirm to Established (event RecvKeepAlive)
A Label Distribution Protocol (LDP) adjacency was terminated because the indicated neighbor stopped communicating. If the adjacency was the only one with this neighbor, the routing protocol process (rpd) terminated the associated LDP session.
RPD_LDP_NBRDOWN: LDP neighbor 10.110.1.5 (so-0/3/1.20) is down
A Label Distribution Protocol (LDP) adjacency with the indicated neighbor became active. The routing protocol process (rpd) established an LDP session with the neighbor if one did not already exist.
RPD_LDP_NBRUP: LDP neighbor 10.110.1.5 (so-0/3/1.20) is up
An OSPF adjacency with the indicated neighboring router was terminated. The local router no longer exchanges routing information with, or directs traffic to, the neighboring router.
RPD_OSPF_NBRDOWN: OSPF neighbor 10.111.1.9 (fe-0/0/3.0) state changed from Full to Down due to Kill all neighbors
Juniper T-Series Syslogs supported in Cisco ANA is the same as the Juniper M-Series Syslogs. For more details on the Juniper M-Series Syslogs see Table 11-3
RAD ACE Syslogs
Table 11-5 lists the RAD ACE Syslogs supported in Cisco ANA.
Table 11-5 RAD ACE Syslogs
Syslog Name
Description
Raw Format
Short Description
any syslogs
Default pattern to send uncorrelated/unknown syslogs to the vision
Table 11-6 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Juniper E-Series Syslogs Registry Parameters shown in Table 11-1.
Juniper JCS Control System Syslogs Registry Parameters
Table 11-7 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Juniper JCS Control System Syslogs Registry Parameters shown in Table 11-2.
Table 11-7 Juniper JCS Control System Syslog Registry Parameters
Short Description
Event Type
Event Subtype
Subtype Value
Expedites Polling
Event Source (IMO Name)
Activate Flow
Correlate
Is Correlation Allowed
Weight
Auto Clear
Severity
Is Ticketable
Auto Remove
Flapping
Juniper BGP neighbor down syslog
juniper bgp neighbor down syslog
juniper bgp neighbor down syslog
bgp-process-state, bgp neighbours
IMpBgp
F
T
F
0
T
maj
F
T
F
Juniper BGPneighbor up syslog
juniper bgp neighbor down syslog
juniper bgp neighbor up syslog
bgp-process-state, bgp neighbours
IMpBgp
F
F
F
0
F
clr
F
T
F
Juniper BGP peer init
juniper bgp peer init
juniper bgp peer init
N
IPhysicalLayer
T
T
F
0
T
maj
F
T
F
Juniper bgp reset
juniper bgp reset
juniper bgp reset
N
IPhysicalLayer
T
T
F
0
T
maj
F
T
F
Juniper BGP Connection Started
juniper bgp started
juniper bgp started
N
IPhysicalLayer
T
T
F
0
T
maj
F
T
F
Juniper BGP task connect
juniper bgp task connect
juniper bgp task connect
N
IPhysicalLayer
T
T
F
0
T
maj
F
T
F
Juniper bgp timeout
juniper bgp timeout
juniper bgp timeout
N
IPhysicalLayer
T
T
F
0
T
maj
F
T
F
Juniper card out syslog
juniper card out syslog
juniper card out syslog
physical command
IModule
F
T
F
0
T
maj
F
T
T
Juniper card in syslog
juniper card out syslog
juniper card in syslog
physical command
IModule
F
F
F
0
F
clr
F
T
T
Juniper fru power off syslog
juniper fru power off syslog
juniper fru power off syslog
physical command
IModule
F
T
F
0
T
maj
F
T
T
Juniper fru power on syslog
juniper fru power off syslog
juniper fru power on syslog
physical command
IModule
F
F
F
0
F
clr
F
T
T
Juniper LDP neighbor down syslog
juniper ldp neighbor down syslog
juniper ldp neighbor down syslog
mpls interfaces, label switching table
ILse
F
T
F
0
T
maj
F
T
F
Juniper LDP neighbor up syslog
juniper ldp neighbor down syslog
juniper ldp neighbor up syslog
mpls interfaces, label switching table
ILse
F
F
F
0
F
clr
F
T
F
Juniper Link down syslog
juniper link down syslog
juniper link down syslog
ip interface oper status
IIPInterface
F
T
F
0
T
maj
F
T
T
Juniper Link up syslog
juniper link down syslog
juniper link up syslog
ip interface oper status
IIPInterface
F
F
F
0
F
clr
F
T
T
Juniper OSPF neighbor down syslog
juniper ospf neighbor syslog
juniper ospf neighbor syslog
N
IPhysicalLayer
T
T
F
0
T
maj
F
T
F
Juniper OSPF neighbor up syslog
juniper ospf neighbor syslog
juniper ospf neighbor up syslog
N
IPhysicalLayer
F
F
F
0
T
clr
F
T
F
Juniper sib offline
juniper sib offline
juniper sib offline
N
IModule
F
F
F
0
T
maj
F
T
F
Juniper sib reset
juniper sib reset
juniper sib reset
N
IModule
F
F
F
0
T
maj
F
T
F
Juniper M-Series Syslogs Registry Parameters
Table 11-8 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Juniper M-Series Syslogs Registry Parameters shown in Table 11-3.
Table 11-9 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Juniper MX-Series Syslogs Registry Parameters shown in Table 11-4.
Juniper T-Series Syslogs Registery Parameters supported in Cisco ANA is the same as the Juniper M-Series Syslogs Register Parameters. For more details on the Juniper M-Series Syslogs see Table 11-8
RAD ACE Syslogs Registry Parameters
Table 11-10 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the RAD ACE Syslogs Registry Parameters shown in Table 11-5.
Feedback
Syslog Tables: A section devoted to the supported syslogs for each NOS platform (e.g., Juniper E-Series Syslogs). Each of these sections contains a table listing the name of each supported syslog, along with a description, the raw format of the syslog string, and a short description. In the syslog tables in this Reference, each syslog's short description is also a link to its corresponding registry parameters.