Table Of Contents

Support Information for Cisco Syslogs

Cisco ASR 9000 Syslogs

Cisco IOS Syslogs

Cisco IOX Syslogs

Cisco ASR 9000 Syslog Registry Parameters

Cisco IOS Syslog Registry Parameters

Cisco IOX Syslog Registry Parameters

Support Information for Cisco Syslogs

---

This chapter provides detailed information about the syslogs supported in Cisco ANA. It presents this information in two forms:

•Syslog Tables: A section devoted to the supported syslogs for each NOS platform (e.g., Cisco ASR 9000 Syslogs). Each of these sections contains a table listing the name of each supported syslog, along with a description, the raw format of the syslog string, and a short description. In the syslog tables in this Reference, each syslog's short description is also a link to its corresponding registry parameters.

•Registry Parameter Tables: A section devoted to the event types, event subtypes and Cisco ANA registry parameters for the supported syslogs. There is one parameter table for every syslog table (e.g., Cisco ASR 9000 Syslog Registry Parameters). Each syslog can have multiple event subtypes, or states. The parameter tables indicate when each state is generated, and how Cisco ANA processes them (such as their severity, whether they are ticketable, can be correlated, are autocleared, and so on).

This chapter includes the following sections:

•Cisco ASR 9000 Syslogs

•Cisco IOS Syslogs

•Cisco IOX Syslogs

•Cisco ASR 9000 Syslog Registry Parameters

•Cisco IOS Syslog Registry Parameters

•Cisco IOX Syslog Registry Parameters

Cisco ASR 9000 Syslogs

Table 37-1 lists the Cisco ASR 9000 Syslogs supported in Cisco ANA.

Table 37-1 Cisco ASR Syslogs 

Syslog Name	Description	Raw Format	Short Description
PLATFORM-PWRMON-4-OIR	handle power supply syslog	%PLATFORM-PWRMON-4-OIR : Power-module 0/PM0/SP inserted	Power supply inserted syslog
PLATFORM-PWRMON-4-OIR	handle power supply syslog	%PLATFORM-PWRMON-4-OIR : Power-module 0/PM0/SP removed	Power supply removed syslog
IP-VRRP-6-INFO_STATECHANGE	handle VRRP state change syslog	%IP-VRRP-6-INFO_STATECHANGE : GigabitEthernet0_5_0_1 vrid 10: state Backup -> Master	Backup to Master change syslog
IP-VRRP-6-INFO_STATECHANGE	handle VRRP state change syslog	%IP-VRRP-6-INFO_STATECHANGE : GigabitEthernet0_5_0_1 vrid 10: state Master -> Backup	Master to Backup change syslog
L2-BFD-4-RATE_LIMIT_WARNING_HIGH_WATERMARK	BFD rate limit high warning syslog	%L2-BFD-4-RATE_LIMIT_WARNING_HIGH_WATERMARK BFD PPS allocation exceeds 90 percent of maximum.	BFD rate limit high warning syslog
ROUTING-RIP-3-ERR_PAK_AUTH	RIP Authentication Failure syslog	%ROUTING-RIP-3-ERR_PAK_AUTH Authentication failure for RIP [chars] packet in context [chars]: instance [chars]: error equals [chars]	RIP authentication failed syslog
ROUTING-RIP-3-ERR_CFG	RIP configuration error syslog	%ROUTING-RIP-3-ERR_CFG Error during configuration in context [chars]: error equals [chars]	RIP configuration error syslog
ROUTING-RIP-6-INFO_OOM	RIP out of memory event syslog	%ROUTING-RIP-6-INFO_OOM RIP out-of-memory event [chars]: new/current state equals [chars]: old state equals [chars]	RIP out of memory event syslog
ROUTING-ISIS-5-ADJCHANGE	handle ROUTING-ISIS-5-ADJCHANGE syslog	RP/0/RSP1/CPU0:Oct 19 19:48:32.212 : isis[240]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to AGS2a (Bundle-Ether1) (L1) Down, Interface state down	routing ISIS neighbor down syslog
ROUTING-ISIS-5-ADJCHANGE	handle ROUTING-ISIS-5-ADJCHANGE syslog	RP/0/RSP1/CPU0:Oct 19 19:48:32.212 : isis[240]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to AGS2a (Bundle-Ether1) (L1) Up, Interface state up	routing ISIS neighbor up syslog

Cisco IOS Syslogs

Table 37-2 lists the Cisco IOS syslogs supported in Cisco ANA.

Table 37-2 Cisco IOS Syslogs 

Syslog Name	Description	Raw Format	Short Description
LINK-5-CHANGED	handle link down syslog	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively up	Link down syslog
LINK-5-CHANGED	handle link down syslog	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively down	Link up syslog
FR-5-DLCICHANGE	handle dlci change syslog	%FR-5-DLCICHANGE: Interface Serial3/0/0:1 - DLCI 105 state changed to INACTIVE	FR DLCI down syslog
FR-5-DLCICHANGE	handle dlci change syslog	%FR-5-DLCICHANGE: Interface Serial3/0/0:1 - DLCI 105 state changed to ACTIVE	FR DLCI up syslog
STANDBY-6-STATECHANGE	handle hsrp syslog	%STANDBY-6-STATECHANGE: Standby: 1: Ethernet1 state Active -> Standby	HSRP group change syslog
STANDBY-6-STATECHANGE	handle hsrp syslog	%STANDBY-6-STATECHANGE: Standby: 1: Ethernet1 state Active -> Speak	HSRP group restored syslog
SNMP-5-SNMPAUTHFAIL	This message indicates that the switch has received an SNMP message that was not properly authenticated	%SNMP-5-SNMPAUTHFAIL: Authentication failed for message from 192.168.1.2	SNMP message has not properly authenticated
SYS-2-MALLOCFAIL	The requested memory allocation is not available from the specified memory pool	%SYS-2-MALLOCFAIL: Memory allocation of 1028 bytes failed from 0x6015EC84, Pool Processor, alignment 0	Memory allocation is not available
SYS-3-CPUHOG	The indicated process ran too long without relinquishing the processor	%SYS-3-CPUHOG: Task ran for 2148 msec (20/13), Process = IP Input, PC = 3199482 -Traceback= 314B5E6 319948A	process ran too long
SCHED-3-STUCKMTMR	A process can register to be notified when various events occur in the router. This message indicates that a registered timer is expired and its value is unchanged after the process has executed two successive times	%SCHED-3-STUCKMTMR: Sleep with expired managed timer 1C7410, time 0x1063F9C52 (00:00:00 ago).	registered timer is expired
DUAL-3-SIA	The EIGRP router hasn't received a reply to a query from one or more neighbors within the time allotted, so it clears the neighbors that didn't send a reply	%DUAL-3-SIA: Route 10.1.2.0/24 stuck-in-active state in IP-EIGRP 1. Cleaning up	EIGRP router query to neighbors timeouted syslog
LANCE-3-BADCABLE	The Ethernet cable is not connected	%LANCE-3-BADCABLE: msgtxt_badcable	Ethernet cable is not connected
LAPB-4-CTRLBAD	A received FRMR has reported a frame with an invalid control code	%LAPB-4-CTRLBAD: Interface Ethernet0, Invalid control field	frame with an invalid control code
DTP-5-NONTRUNKPORTON	The interface changed to non trunk	%DTP-5- ONTRUNKPORTON:Port 8/1 has become trunk	Interface changed to non trunk
DTP-5-NONTRUNKPORTON	The interface changed to non trunk	%DTP-5- ONTRUNKPORTON:Port 8/1 has become non trunk	Interface changed to trunk
LINEPROTO-5-UPDOWN	handle line syslog	%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to down	Line down syslog
LINEPROTO-5-UPDOWN	handle line syslog	%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up	Line up syslog
IPX-3-BADIGRPSAP	A hardware or software error occurred	%IPX-3-BADIGRPSAP: Cannot send incremental SAP update to peer on interface Ethernet0. Increasing output-sap-delay may help	Cannot send incremental SAP update to peer
LANCE-5-COLL	An Ethernet cable is broken or unterminated, or the transceiver is unplugged	%LANCE-5-COLL: Unit 1, excessive collisions. TDR=10	An Ethernet cable is broken or unterminated
LANCE-5-LATECOLL	An Ethernet transceiver is unplugged or defective	%LANCE-5-LATECOLL: Unit 1, late collision error	An Ethernet transceiver is unplugged or defective
SYS-5-CONFIG_I	The router's configuration was changed	%SYS-5-CONFIG_I: Configured from console by console	Device configuration changed
AT-6-NODEWRONG	An AppleTalk node sent a GetNet Info request to this router specifying an invalid network number for the source of the GetNet Info request	%AT-6-NODEWRONG: XX: AppleTalk node 192.168.2.0 misconfigured; reply has been broadcast	AppleTalk invalid network number
SECURITY-1-PORTSHUTDOWN	This message indicates that a port has been shut down due to an insecure host sourcing a packet into that port	%Security-1-PORTSHUTDOWN: Port 0/1 shutdown due to security violation	security port shut down
SPANTREE-2-RX_PORTFAST	A BPDU that has spanning-tree portfast enabled was received on the specified interface	%SPANTREE-2-RX_PORTFAST:Received BPDU on PortFast enabled port. Disabling 2/1	BPDU spanning-tree portfast enabled
UDLD-3-DISABLE	This message indicates that a fault has been detected in a fiber Ethernet port connection and that the port has been disabled to prevent other protocols from malfunctioning	%UDLD-3-DISABLE: Unidirectional link detected on port 1/2. Port disabled	Fault has been detected in a fiber Ethernet port connection
UDLD-3-DISABLEFAIL	This message indicates that a fault was detected in the wiring on a fiber Ethernet port, but UDLD could not disable the port	%UDLD-3-DISABLEFAIL: Unidirectional link detected on port 1/2, failed to disable port	Unidirectional link detected
UDLD-4-ONEWAYPATH	This message indicates that a fault has been detected in a fiber Ethernet connection in a shared media environment and that the connection may cause a possible malfunction	%UDLD-4-ONEWAYPATH: A unidirectional link from port 1/2 to port 1/2 of device abc was detected	Fault has been detected in a fiber Ethernet connection
OSPF-5-ADJCHG	handle ospf syslog	%OSPF-5-ADJCHG: Process 1, Nbr 10.100.12.6 on FastEthernet1/0 from Up to DOWN, Loading Done	OSPF neighbor down syslog
OSPF-5-ADJCHG	handle ospf syslog	%OSPF-5-ADJCHG: Process 1, Nbr 10.100.12.6 on FastEthernet1/0 from LOADING to FULL, Loading Done	OSPF neighbor up syslog
SPANTREE-2-LOOPGUARDBLOCK	When the loop guard blocks an inconsistent port, the following message is logged	%SPANTREE-2-LOOPGUARDBLOCK: No BPDUs were received on port 3/2 in vlan 3. Moved to loop-inconsistent state	No BPDUs were received on port
SPANTREE-2-LOOPGUARDUNBLOCK	After the recovery, the following message is logged	%SPANTREE-2-LOOPGUARDUNBLOCK: port 3/2 restored in vlan 3	BPDUs were received on port
AMDP2_FE-5-COLL	Ethernet or Fast Ethernet is seeing multiple collisions. This problem may occur under heavy loads	%AMDP2_FE-5-COLL: AMDP2/FE Ethernet1/1, Excessive collisions, TDR=1, TRC=1	Ethernet is seeing multiple collisions
DEC21140-5-COLL	A Fast Ethernet packet has been dropped because too many attempts to transmit it were stopped by collisions	%DEC21140-5-COLL: unit 0, excessive collisions	Fast Ethernet packet has been dropped
ILACC-5-COLL	An Ethernet cable is broken or is not terminated, or the transceiver is unplugged	%ILACC-5-COLL: Unit 0, excessive collisions. TDR=0.12	An Ethernet cable is broken
PQUICC-5-COLL	PQUICC-5-COLL : An Ethernet cable is broken or is not terminated	%PQUICC-5-COLL: Unit 1, excessive collisions. Retry limit 12 exceeded	pquicc 5 coll syslog: An Ethernet cable is broken
PQUICC_ETHER-5-COLL	PQUICC_ETHER-5-COLL : An Ethernet cable is broken or is not terminated	%PQUICC_ETHER-5-COLL: Unit 1, excessive collisions. Retry limit 2 exceeded	pquicc ether 5 coll syslog: An Ethernet cable is broken
PQUICC_FE-5-COLL	Ethernet or Fast Ethernet is detecting multiple collisions	%PQUICC_FE-5-COLL: PQUICC/FE(0/1), Excessive collisions, TDR=10, TRC=10.	Ethernet is detecting multiple collisions
QUICC_ETHER-5-COLL	An Ethernet cable is broken or unterminated	%PQUICC_ETHER-5-COLL: Unit 1, excessive collisions. Retry limit 2 exceeded	quicc ether 5 coll syslog: An Ethernet cable is broken
AMDP2_FE-5-LATECOLL	Late collisions have occurred on the Ethernet or Fast Ethernet	%AMDP2_FE-5-LATECOLL: Ethernet1/1 transmit error	Late collisions have occurred
CLNS-5-ADJCHANGE	handle isis syslog	%CLNS-5-ADJCHANGE: ISIS: Adjacency to edge-02(POS0/0) Down, hold time expired	IS-IS neighbor down syslog
CLNS-5-ADJCHANGE	handle isis syslog	%CLNS-5-ADJCHANGE: ISIS: Adjacency to edge-02(POS0/0) Up, hold time expired	IS-IS neighbor up syslog
DEC21140-5-LATECOLL	Late collisions are collisions that occur after transmitting the preamble	%DEC21140-5-LATECOLL: FastEthernet0/0 transmit error	Late collisions have occurred
ILACC-5-LATECOLL	An Ethernet transceiver is malfunctioning, the Ethernet is overloaded, or the Ethernet cable is too long	%ILACC-5-LATECOLL: Unit 0, late collision error	ilacc 5 late coll syslog: Late collisions have occurred
PQUICC-5-LATECOLL	pquicc 5 late coll syslog	%PQUICC-5-LATECOLL: Unit 1, late collision error	pquicc 5 late coll syslog: Late collisions have occurred
PQUICC_ETHER-5-LATECOLL	PQUICC_ETHER-5-LATECOLL : A new network may not have been engineered properly or adding a regenerator to an existing network may have changed the network specifications	%PQUICC_ETHER-5-LATECOLL: Unit 0, late collision error	A new network may not have been engineered properly
PQUICC_FE-5-LATECOLL	Late collisions have occurred on the Ethernet or Fast Ethernet interface	%PQUICC_FE-5-LATECOLL: PQUICC/FE(0/1), Late collision	pquicc fe 5 late coll syslog: Late collisions have occurred
QUICC_ETHER-5-LATECOLL	QUICC_ETHER-5-LATECOLL : A software or hardware error occurred	%QUICC_ETHER-5-LATECOLL: Unit 0, late collision error	quicc ether 5 late coll syslog: Late collisions have occurred
SNMP-5-LINKTRAP	This message indicates the type of Link Trap	%SNMP-5-LINKTRAP: Link down Trap -- ifName=sc0	Link trap down has occurred
SNMP-5-LINKTRAP	This message indicates the type of Link Trap	%SNMP-5-LINKTRAP: Link up Trap -- ifName=sc0	Link trap up has occurred
SNMP-5-TOPOTRAP	his message indicates that a configured port changed from the learning state to the forwarding state, or from the forwarding state to the blocking state	%SNMP-5-TOPOTRAP: Topology Change Trap for VLAN 1	configured port changed state from learning to forwarding
DUAL-5-NBRCHANGE	handle eigrp syslog	%DUAL-5-NBRCHANGE: IP-EIGRP 1: Neighbor 10.1.4.3 (Serial0) is down: stuck in active	DUAL 5 neighbor down syslog
DUAL-5-NBRCHANGE	handle eigrp syslog	%DUAL-5-NBRCHANGE: IP-EIGRP 1: Neighbor 10.1.4.3 (Serial0) is up: stuck in active	DUAL 5 neighbor up syslog
LINK-3-UPDOWN	handle link down syslog	%LINK-3-UPDOWN: Interface ATM2/0, changed state to down	Link down syslog
LINK-3-UPDOWN	handle link down syslog	%LINK-3-UPDOWN: Interface ATM2/0, changed state to up	Link up syslog
BGP-5-ADJCHANGE-vrf	handle BGP 5 syslog from vrf. make sure it is before the "BGP-5-ADJCHANGE" pattern	%BGP-5-ADJCHANGE: neighbor 10.1.2.3 vpn vrf inet Down	BGP neighbor down syslog
BGP-5-ADJCHANGE-vrf	handle BGP 5 syslog from vrf. make sure it is before the "BGP-5-ADJCHANGE" pattern	%BGP-5-ADJCHANGE: neighbor 10.1.2.3 vpn vrf inet Up	BGP neighbor up syslog
BGP-5-ADJCHANGE	handle BGP 5 syslog	%BGP-5-ADJCHANGE: neighbor 161.10.11.1 Down	BGP neighbor down syslog
BGP-5-ADJCHANGE	handle BGP 5 syslog	%BGP-5-ADJCHANGE: neighbor 161.10.11.1 Up	BGP neighbor up syslog
OIR-6-(REM|INS)CARD	handle module out syslog	%OIR-6-INSCARD: Card inserted from slot 4, interfaces disabled	card in syslog
OIR-6-(REM|INS)CARD	handle module out syslog	%OIR-6-REMCARD: Card removed from slot 4, interfaces disabled	card out syslog
OIR-SP-3-PWRCYCLE	card being power cycled	%OIR-SP-3-PWRCYCLE: Card in module x, is being power-cycled off (Module not responding to Keep Alive polling)	oir sp 3 power cycle syslog
SYS-5-RELOAD	syslog for reloading the device	%SYS-5-RELOAD: Reload requested	Reloading device syslog
SYS-5-RESTART	syslog for restarting the device	%SYS-5-RESTART: System restarted --	System restart
DTP-5-TRUNKPORTON	The interface returned to be a trunk	%DTP-5-TRUNKPORTON:Port 7/2 has become interface trunk	Interface changed to non trunk
DTP-5-TRUNKPORTON	The interface returned to be a trunk	%DTP-5-TRUNKPORTON:Port 7/2 has become dot1q trunk	Interface changed to trunk
ISDN-6-CONNECT	handle ISDN connect syslog	%ISDN-6-CONNECT: Interface BRI0/0:1 is now connected to 5772223	ISDN connect syslog
ISDN-6-CONNECT	handle ISDN connect syslog	%ISDN-6-CONNECT: Interface BRI0/0:1 is now connected to 5772223	ISDN disconnect syslog
ISDN-6-DISCONNECT	handle ISDN connect syslog	%ISDN-6-DISCONNECT: Interface BRI0:1? disconnected from 8130 traxbol, call lasted 60 seconds	ISDN connect syslog
ISDN-6-DISCONNECT	handle ISDN connect syslog	%ISDN-6-DISCONNECT: Interface BRI0:1? disconnected from 8130 traxbol, call lasted 60 seconds	ISDN disconnect syslog
CDP-4-DUPLEX_MISMATCH	This messages indicates a duplex mismatch problem (IOS)	%CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet6/2 (not half duplex), with TBA04251336 3/2 (half duplex)	Duplex mismatch discovered
ISDN-6-CONNECT-2	handle ISDN connect syslog2	%ISDN-6-LAYER2UP: Layer 2 for Interface FastEthernet2/1, TEI 0 changed to up	ISDN connect syslog
ISDN-6-CONNECT-2	handle ISDN connect syslog2	%ISDN-6-DISCONNECT: Interface FastEthernet0/1 disconnected from 71017 , call lasted 22 seconds	ISDN disconnect syslog
ISDN-6-DISCONNECT-2	handle ISDN disconnect syslog2	%ISDN-6-LAYER2UP: Layer 2 for Interface FastEthernet2/1, TEI 0 changed to up	ISDN connect syslog
ISDN-6-DISCONNECT-2	handle ISDN disconnect syslog2	%ISDN-6-LAYER2DOWN: Layer 2 for Interface FastEthernet0/1, TEI 0 changed to down	ISDN disconnect syslog
LDP-5-NBRCHG-TDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: TDP Neighbor 10.12.12.12:0 is DOWN (TCP connection closed by peer)	TDP neighbor down syslog
LDP-5-NBRCHG-TDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: TDP Neighbor 10.12.12.12:0 is UP (TCP connection closed by peer)	TDP neighbor up syslog
LDP-5-NBRCHG-LDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: LDP Neighbor 10.12.12.12:0 is DOWN	LDP neighbor down syslog
LDP-5-NBRCHG-LDP	handle LDP Neighbor change syslog	%LDP-5-NBRCHG: LDP Neighbor 10.12.12.12:0 is UP	LDP neighbor up syslog
MPLS_TE-5-TUN_reoptimize	handle tunnel reoptimization syslog	%MPLS_TE-5-TUN: Tun1002: installed LSP 1002_33 (popt 10) for 1002_32 (popt 20), reopt. LSP is up	MPSL-TE tunnel reoptimized/rerouted syslog
MPLS_TE-5-TUN_up	handle tunnel up syslog	%MPLS_TE-5-TUN: Tun0: installed LSP 0_26 (popt 5) for nil, got 1st feasible path opt	MPLS TE tunnel down syslog
MPLS_TE-5-TUN_up	handle tunnel up syslog	%MPLS_TE-5-TUN: Tun0: installed LSP 0_26 (popt 5) for nil, got 1st feasible path opt	MPLS TE tunnel up syslog
MPLS_TE-5-TUN_down	handle tunnel down syslog	%MPLS_TE-5-TUN: Tun1001: installed LSP nil for 1001_92 (popt 1), path verification failed	MPLS TE tunnel down syslog
MPLS_TE-5-TUN_down	handle tunnel down syslog	%MPLS_TE-5-TUN: Tun1001: installed LSP nil for 1001_92 (popt 1), path verification failed	MPLS TE tunnel up syslog
ENV_MON-2-SUPPLY	Power supply is not working or has not been turned on	%ENV_MON-2-SUPPLY : [chars] Power Supply is Operation or Non-Operational	A power supply is not working or has not been turned on
SYS-SP-STDBY-5-RESTART	restarting the device	%SYS-SP-STDBY-5-RESTART: System restarted -- Cisco IOS Software (c7600s72033-ADVENTERPRISEK9_WAN_MZ), Version 12.2 Copyright (c) 1986-2006 by Cisco Systems, Inc.Compiled Thu 26-Oct-06 03:49 by	System restart
UDLD-SP-4-UDLD_PORT_DISABLED	aggressive mode failure detected	%UDLD-SP-4-UDLD_PORT_DISABLED: UDLD disabled interface FastEthernet2/1, FastEthernet2/1	Aggressive Mode Failure Detected
FABRIC-SP-5-FABRIC_MODULE_BACKUP	clear block option	%FABRIC-SP-5-FABRIC_MODULE_BACKUP: The Switch Fabric Module in slot 6 became standby	fabric sp 5 clear block down syslog
FABRIC-SP-5-FABRIC_MODULE_BACKUP	clear block option	%FABRIC-SP-5-FABRIC_MODULE_BACKUP: The Switch Fabric Module in slot 6 became standby	fabric sp 5 clear block up syslog
C6KENV-SP-4-FANTRAYFAILED	fan tray failed	%C6KENV-SP-4-FANTRAYFAILED: fan tray 2 failed	c6kenv sp 4 fan tray fail syslog
PFREDUN-SP-4-BOOTSTRING_INVALID	bootstring invalid	PFREDUN-SP-4-BOOTSTRING_INVALID: The bootfile slavebootflash:image_name is not present in standby	pfredun sp 4 bootstring invalid syslog
SYS-5-POWER-SUPPLY	Power supply failure notification	Power supply [dec] failed	Power supply failed syslog
SYS-5-POWER-SUPPLY	Power supply failure notification	Power supply [dec] okay	Power supply okay syslog
PM-SP-STDBY-4-ERR_DISABLE	err disable state	%PM-SP-STDBY-4-ERR_DISABLE: bpduguard error detected on Gi2/5, putting Gi2/5 in err-disable state	pm sp stdby 4 err disable syslog
HSRP-6-STATECHANGE	handle hsrp syslog	%HSRP-6-STATECHANGE:FastEthernet0/0 Grp 1 state Init	HSRP group change syslog
HSRP-6-STATECHANGE	handle hsrp syslog	%HSRP-6-STATECHANGE:FastEthernet0/0 Grp 1 state Standby	HSRP group restored syslog
BGP-3-NOTIFICATION	handle BGP 3 syslog	%BGP-3-NOTIFICATION: sent to neighbor 10.10.10.254 4/0 (hold time expired) 0 bytes	BGP notification syslog
NEW-INTERFACE-FOR-VSL-CONNECTION	new interface for the VSL connection syslog (one of the ether channel interfaces)	%VSL-5-VSL_CNTRL_LINK: New VSL Control Link 8/4	new ethernet channel interface for VSL connection
VSL-LINK-UP	VSL link up syslog	%VSLP-5-VSL_UP: Ready for Role Resolution with Switch=1, MAC=0014.1bc6.1c00 over 8/4	VSL link up syslog
VSL-LINK-DOWN	VSL link down syslog	%VSLP-SW1_SP-2-VSL_DOWN: Last VSL interface Te1/6/4 went down	VSL link down syslog
VSL-LINK-UP	VSL link up syslog and active switch is #1	%VSLP-SW1_SP-5-VSL_UP: Ready for Role Resolution with Switch=2, MAC=0013a.30e1.6800 over Te1/5/5	VSL link up syslog: active switch is #1
VSL-LINK-UP	VSL link up syslog and active switch is #2	%VSLP-SW2_SP-5-VSL_UP: Ready for Role Resolution with Switch=2, MAC=0013a.30e1.6800 over Te1/5/5	VSL link up syslog: active switch is #2
VSL-ROLE-MISMATCH-RESOLVED	role mismatch resolved syslog, sent from active switch #1	%VSLP-SW1_SP-5-RRP_ROLE_RESOLVED: Role resolved as ACTIVE by VSLP	role mismatch resolved syslog, sent from active switch #1
VSL-ROLE-MISMATCH-RESOLVED	role mismatch resolved syslog, sent from active switch #2	%VSLP-SW2_SP-5-RRP_ROLE_RESOLVED: Role resolved as ACTIVE by VSLP	role mismatch resolved syslog, sent from active switch #2
ENV-SP-4-FANTRAYFAILED	fan tray failed	%C7600_ENV-SP-4-FANTRAYFAILED: fan tray 2 failed	env sp 4 fan tray fail syslog
PWR-SP-2-PSFAIL	power supply failed	%C7600_PWR-SP-2-PSFAIL: power supply 1 output failed.	pwr sp 2 power supply fail syslog
BGP-5-ADJCHANGE-bfd	handle BGP 5 syslogs for BFD	%BGP-5-ADJCHANGE: neighbor 192.168.20.1 Down BFD adjacency down	BGP neighbor down syslog
BGP-5-ADJCHANGE-bfd	handle BGP 5 syslogs for BFD	%BGP-5-ADJCHANGE: neighbor 192.168.20.1 UP BFD adjacency up	BGP neighbor up syslog
VRRP-6-STATECHANGE	Virtual Router Redundancy Protocol (VRRP) message: The VRRP router has changed state.	%VRRP-6-STATECHANGE: Fa0/1 Grp 1 state Backup -> Master	VRRP State Changed syslog
ATM_AIM-5-ACTIVE_LINK_(DOWN|UP)	The specified link in the specified IMA group has become inactive/active	%ATM_AIM-5-ACTIVE_LINK_DOWN: Interface ATM1/0 of IMA Group ATM0/IMA2 is now inactive	Ima Link Status Change Down Syslog
ATM_AIM-5-ACTIVE_LINK_(DOWN|UP)	The specified link in the specified IMA group has become inactive/active	%ATM_AIM-5-ACTIVE_LINK_UP: Interface ATM1/0 of IMA Group ATM0/IMA2 is now active	Ima Link Status Change Up Syslog
ATM_AIM-5-ACTIVE_LINK_CHANGE	Active links were added to or removed from the group, changing the bandwidth of the group	%ATM_AIM-5-ACTIVE_LINK_CHANGE : IMA Group ATM3/1/ima0 now has 2 active links	IMA Active Link Change Syslog
CDP-4-NATIVE_VLAN_MISMATCH	Native VLAN mismatch discovered	%CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet1/1 (12), with 3750E-24TD-AGG3 FastEthernet0/2 (1)	Native VLAN mismatch discovered
TOP_MODULE-6-CLK_STATUS_CHANGE	Clock status change	Mar 19 15:26:54.371: %TOP_MODULE-6-CLK_STATUS_CHANGE: PLL clock changed to LOCKED	Clock status change syslog
TOP_MODULE-6-CLK_SOURCE_CHANGE	Clock source change	Mar 19 15:15:40.523: %TOP_MODULE-6-CLK_SOURCE_CHANGE: Changing clock reference source to Seconary TDM 8KHZ	Clock source change syslog
L2-L2VPN_PW-3-UPDOWN	The L2VPN Pseudowire went down	%L2-L2VPN_PW-3-UPDOWN : Pseudowire with address 2.2.2.2, id 140, state is Down	pseudo wire tunnel down syslog
L2-L2VPN_PW-3-UPDOWN	The L2VPN Pseudowire went up	%L2-L2VPN_PW-3-UPDOWN : Pseudowire with address 2.2.2.2, id 140, state is Up	pseudo wire tunnel up syslog
ETHER_SERVICE-6-ERR_DISABLED	Service instance shutdown due to errdisable.	%ETHER_SERVICE-6-ERR_DISABLED: Mac security violation - shutdown service instance 900 on interface GigabitEthernet10/0/12	EFP service error disabled syslog
ETHER_SERVICE-6-UPDOWN	Service instance shutdown Syslog	%ETHER_SERVICE-6-UPDOWN: Service instance 111 on interface GigabitEthernet10/0/3 changed to down	EFP down syslog
ETHER_SERVICE-6-UPDOWN	Service instance up Syslog	%ETHER_SERVICE-6-UPDOWN: Service instance 111 on interface GigabitEthernet10/0/3 changed to up	EFP up syslog
REP-SP-4-LINKSTATUS	The Resilient Ethernet Protocol (REP) link status has changed.	<188>950: *Aug 28 05:07:26.987: %REP-SP-4-LINKSTATUS: GigabitEthernet5/11 (segment 1) is non-operational due to neighbor not responding	REP link not operational syslog
REP-SP-4-LINKSTATUS	The Resilient Ethernet Protocol (REP) link status has changed.	<188>949:*Aug 28 05:04:40.690: %REP-SP-4-LINKSTATUS: GigabitEthernet5/11 (segment 1) is operational	REP link operational syslog
OSPFv3-5-ADJCHG	An OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPFv3 neighbor down syslog
OSPFv3-5-ADJCHG	An OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from LOADING to FULL, Neighbor Down: Interface down or detached	OSPFv3 neighbor up syslog
ETHER_CFM-6-ENTER_AIS	handle CFM AIS defect syslog	%ETHER_CFM-6-ENTER_AIS: local mep with mpid 101 level 4 id 7 dir I Interface Ethernet0/0 enters AIS defect condition	CFM enter AIS defect syslog
ETHER_CFM-6-EXIT_AIS	handle CFM AIS defect syslog	%ETHER_CFM-6-EXIT_AIS: local mep with mpid 101 level 4 id 7 dir I Interface Ethernet0/0 enters AIS defect condition	CFM exit AIS defect syslog
E_CFM-6-ENTER_AIS	handle CFM AIS defect syslog	%E_CFM-6-ENTER_AIS: local mep with mpid 7606 level 4 BD/VLAN 22 dir D Interface Gi5/1 enters AIS defect condition	CFM enter AIS defect syslog
E_CFM-6-EXIT_AIS	handle CFM AIS defect syslog	%E_CFM-6-EXIT_AIS: local mep with mpid 7606 level 4 BD/VLAN 22 dir D Interface Gi5/1 enters AIS defect condition	CFM exit AIS defect syslog
ETHER_CFM-6-ENTER_AIS_INT	handle CFM interface AIS defect syslog	%ETHER_CFM-6-ENTER_AIS_INT: Interface Ethernet0/0 enters AIS defect condition for outward direction	CFM interface enter AIS defect syslog
ETHER_CFM-6-EXIT_AIS_INT	handle CFM interface AIS defect syslog	%ETHER_CFM-6-EXIT_AIS_INT: Interface Ethernet0/0 enters AIS defect condition for outward direction	CFM interface exit AIS defect syslog
E_CFM-6-ENTER_AIS_INT	handle CFM interface AIS defect syslog	%E_CFM-6-ENTER_AIS_INT: Interface GigabitEthernet5/1 enters AIS defect condition for Down direction	CFM interface enter AIS defect syslog
E_CFM-6-EXIT_AIS_INT	handle CFM interface AIS defect syslog	%E_CFM-6-EXIT_AIS_INT: Interface GigabitEthernet5/1 enters AIS defect condition for Down direction	CFM interface exit AIS defect syslog
E_CFM-6-ENTER_LCK	handle CFM AIS defect syslog	%E_CFM-6-ENTER_LCK: local mep with mpid 7606 level 4 BD/VLAN 22 dir D Interface Gi5/1 enters LCK defect condition	CFM enter LCK defect syslog
E_CFM-6-EXIT_LCK	handle CFM AIS defect syslog	%E_CFM-6-EXIT_LCK: local mep with mpid 7606 level 4 BD/VLAN 22 dir D Interface Gi5/1 exited LCK defect condition	CFM exit LCK defect syslog
E_CFM-6-ENTER_LCK_INT	CFM interface enter LCK defect syslog	%E_CFM-6-ENTER_LCK_INT: Interface GigabitEthernet5/1 enters LCK defect condition for Down direction	CFM interface enter LCK syslog
E_CFM-6-EXIT_LCK_INT	CFM interface exit LCK defect syslog	%E_CFM-6-EXIT_LCK_INT: Interface GigabitEthernet5/1 exited LCK defect condition for Down direction	CFM interface exit LCK syslog
E_CFM-3-REMOTE_MEP_DOWN	handle Remote MEP syslog	%E_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 1911 evc DemoAugEVC vlan 911 MA name DemoAugMA in domain DemoAugDA changed state to down with event code TimeOut.	CFM Mep Down syslog
E_CFM-3-REMOTE_MEP_UP	handle Remote MEP syslog	%E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 755 evc EVC_S4_22 vlan 22 MA name S4_22 domain L4 interface status Up event code Returning.	CFM Mep Up syslog
ETHER_CFM-3-REMOTE_MEP_DOWN	handle Remote MEP syslog	%ETHER_CFM-3-REMOTE_MEP_DOWN: Remote MEP mpid 537 vlan 555 CSIID S4_sw in domain D4_sw changed state to down with event code lastGasp.	CFM Mep Down syslog
ETHER_CFM-3-REMOTE_MEP_UP	handle Remote MEP syslog	%ETHER_CFM-3-REMOTE_MEP_UP: Remote MEP mpid 537 vlan 555 CSIID S4_sw in domain D4_sw changed state to up with event code lastGasp.	CFM Mep Up syslog
E_CFM-6-REMOTE_MEP_DOWN	handle Remote MEP syslog	%E_CFM-6-REMOTE_MEP_DOWN: Continuity Check message is received from a remote MEP with mpid 755 evc EVC_S4_22 vlan 22 MA name S4_22 domain L4 interface status Down event code Returning.	CFM Mep Down syslog
E_CFM-6-REMOTE_MEP_UP	handle Remote MEP syslog	%E_CFM-6-REMOTE_MEP_UP: Continuity Check message is received from a remote MEP with mpid 755 evc EVC_S4_22 vlan 22 MA name S4_22 domain L4 interface status Up event code Returning.	CFM Mep Up syslog
OSPFv3-5-ADJCHG	An OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPFv3 neighbor down syslog
OSPFv3-5-ADJCHG	An OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from LOADING to FULL, Neighbor Down: Interface down or detached	OSPFv3 neighbor up syslog
TOP_MODULE-5-APPL_UPDOWN	Timing over packet application syslog	%TOP_MODULE-5-APPL_UPDOWN: Timing over packet application is down	Timing over packet application down syslog
TOP_MODULE-5-APPL_UPDOWN	Timing over packet application syslog	%TOP_MODULE-5-APPL_UPDOWN: Timing over packet application is up	Timing over packet application up syslog
HSRP-5-STATECHANGE	handle hsrp 5 syslog	%HSRP-5-STATECHANGE: GigabitEthernet0/1.555 Grp 55 state Active -> Init	HSRP group change syslog
HSRP-5-STATECHANGE	handle hsrp 5 syslog	%HSRP-5-STATECHANGE: GigabitEthernet0/1.555 Grp 55 state Active -> Standby	HSRP group restored syslog
DWDM-4-G709ALARM	The specified G709 Alarm has been declared	%DWDM-4-G709ALARM : DWDM 2/0/0 : LOS declared	Layer2 G709 alarm syslog
DWDM-4-G709ALARM	The specified G709 Alarm has been cleared	%DWDM-4-G709ALARM : DWDM 2/0/0 : LOS cleared	Layer2 G709 clear syslog

Cisco IOX Syslogs

Table 37-3 lists the Cisco IOX Syslogs supported in Cisco ANA.

Table 37-3 Cisco IOX Syslogs 

Syslog Name	Description	Raw Format	Short Description
LINK-3-UPDOWN	The interface hardware has gone either down or up.	%LINK-3-UPDOWN: Interface ATM2/0, changed state to down	Link down syslog
LINK-3-UPDOWN	The interface hardware has gone either down or up.	%LINK-3-UPDOWN: Interface ATM2/0, changed state to up	Link up syslog
LINK-5-CHANGED	The interface has changed state.	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively up	Link down syslog
LINK-5-CHANGED	The interface has changed state.	%LINK-5-CHANGED: Interface Ethernet5/1, changed state to administratively down	Link up syslog
LINEPROTO-5-UPDOWN	The data link level line protocol changed state.	%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up	Line down syslog
LINEPROTO-5-UPDOWN	The data link level line protocol changed state.	%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/1, changed state to up	Line up syslog
OSPF-5-ADJCHG	An OSPF neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPF-5-ADJCHG: Process 1, Nbr 192.168.100.100 on POS1/0 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPF neighbor down syslog
OSPF-5-ADJCHG	An OSPF neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPF-5-ADJCHG: Process 1, Nbr 192.168.100.100 on POS1/0 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPF neighbor up syslog
ENVMON-ADDITIVE-POWER-OVERBUDGET	The power calculated in use by the chassis exceeds that available by the powershelf. This condition could result in an outage of the chassis if action is not immediately taken	PLATFORM-ENVMON-2-POWERSUPPLY_CURRENT : 1 current has reached high level at 1 A	envmon powersupply syslog
ENVMON-ENV-CONDITION	One or more environmental conditions exist on the specified slot. If left untended, they could result in loss of service or even hardware damage	PLATFORM-ENVMON-2-ENV_CONDITION : An environmental condition exists on slot 1	envmon condition syslog
ENVMON-ENV-CONDITION	One or more environmental conditions exist on the specified slot. If left untended, they could result in loss of service or even hardware damage	PLATFORM-ENVMON-2-ENV_CONDITION_CLEAR : The environmental condition on slot 1 has cleared	envmon condition clear syslog
ENVMON-FAN	The fan array specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-FAN : The fan array 1 has reached high level.	envmon fan syslog
ENVMON-FAN	The fan array specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-FAN_CLEAR : The fan array 1 has reached high level.	envmon fan clear syslog
ENVMON-LOW-FAN-SPEED-WARNING	Indicates that the fan is spinning very slow	PLATFORM-ENVMON-5-LOW_FAN_SPEED_WARNING : 1 is spinning slow - speed is dRPM (register value = 0x x)	envmon fan syslog
ENVMON-OVERTEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-OVERTEMP : 1 temperature has reached high level	envmon tempretaure syslog
ENVMON-OVERTEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-OVERTEMP_CLEAR : 1 temperature has returned to a normal level	envmon tempretaure clear syslog
ENVMON-PEM-REMOVE	The power entry module specified was detected as removed	PLATFORM-ENVMON-5-PEM_REMOVE : 2 removed from slot 2	card out syslog
ENVMON-PEM-REMOVE	The power entry module specified was detected as removed	PLATFORM-ENVMON-5-PEM_INSERT : 2 inserted into slot 2	card in syslog
ENVMON-POWERSUPPLY-CURRENT	handle envmon powersupply current syslog	PLATFORM-ENVMON-2-POWERSUPPLY_CURRENT : 1 current has reached high level at 1 A	envmon powersupply syslog
ENVMON-POWERSUPPLY-CURRENT	The current supply specified has reached a critical level and is now out of specification	PLATFORM-ENVMON-2-POWERSUPPLY_CURRENT_CLEAR : 1 current has returned to a normal level at d	envmon powersupply clear syslog
ENVMON-POWERSUPPLY-NONOP	The power supply specified has become non operational	PLATFORM-ENVMON-2-POWERSUPPLY_NONOP : Powersupply1 is Non-Operational	envmon powersupply syslog
ENVMON-POWERSUPPLY-NONOP	The power supply specified has become non operational	PLATFORM-ENVMON-2-POWERSUPPLY_NONOP_CLEAR : Powersupply1 has become operational	envmon powersupply clear syslog
ENVMON-POWERSUPPLY-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	PLATFORM-ENVMON-2-POWERSUPPLY_VOLTAGE : Powersupply1 voltage has reached high level at 11 V	envmon powersupply syslog
ENVMON-POWERSUPPLY-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	PLATFORM-ENVMON-2-POWERSUPPLY_VOLTAGE_CLEAR : Powersupply1 voltage has returned to a normal level at d V	envmon powersupply clear syslog
ENVMON-TEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-OVERTEMP : 1 temperature has reached high level	envmon tempretaure syslog
ENVMON-TEMP	The temperature sensor specified has reached a warning or critical level and is approaching or approached a condition that is outside the acceptable range	PLATFORM-ENVMON-2-OVERTEMP_CLEAR : 1 temperature has returned to a normal level	envmon tempretaure clear syslog
ENVMON-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	PLATFORM-ENVMON-2-POWERSUPPLY_VOLTAGE : Powersupply1 voltage has reached high level at 11 V	envmon powersupply syslog
ENVMON-VOLTAGE	The voltage supply specified has reached a critical level and is now out of specification	PLATFORM-ENVMON-2-POWERSUPPLY_VOLTAGE_CLEAR : Powersupply1 voltage has returned to a normal level at d V	envmon powersupply clear syslog
FIA-FIAHW-LOS	This error indicates a problem (Loss of Sync) in the interface between the card reporting error and the switch fabric card in the indicated slot. This error is traffic affecting. Error recovery is triggered by this error	ENVMON-3-FIAHW_LOS : Persistent LOS on serial link (from slot 2)	fabric hardware syslog
FIA-FIAHW-LOS	This error indicates a problem (Loss of Sync) in the interface between the card reporting error and the switch fabric card in the indicated slot. This error is traffic affecting. Error recovery is triggered by this error	ENVMON-3-FIAHW_LOS_CLEAR LOS : cleared on serial link (from slot 2)	fabric hardware clear syslog
FLASH-CARD-REMOVAL	handle flash card insertion or removal syslog	libpcmcia_ide-1-CARD_UNAVAILABLE : flash1: Can not access flash device	flash card removed syslog
FLASH-CARD-REMOVAL	handle flash card insertion or removal syslog	libpcmcia_ide-1-CARD_SWAPPED : flash1: The flash card has been swapped (OIR)	flash card inserted syslog
LIBPARSER-ERR-MEMALLOC	handle memory allocation in syslog	MGBL-LIBPARSER-3-ERR_MEM_ALLOC : s: memory allocation routine failed.	Memory allocation is not available
NODE-RELOAD	handle node reload syslog by sysldr	PLATFORM-SHELFMGR-3-SHUTDOWN_RESET : Node 0/SM2/* is reset due to admin shut shut request	Module reset syslog
NODE-STATE-CHANGE	Indicates a change in the card oper status	PLATFORM-INVMGR-6-NODE_STATE_CHANGE : Node: 0/RP0/*, state: BRINGDOWN	Card oper status changed
NODE-STATE-CHANGE	Indicates a change in the card oper status	PLATFORM-INVMGR-6-NODE_STATE_CHANGE : Node: 0/0/CPU0, state: IOS XR RUN	Card oper status changed
OIROUT	handle module out syslog	%PLATFORM-INV-6-OIROUT : OIR: Node 0/0/CPU0 removed	card out syslog
OIROUT	handle module out syslog	%PLATFORM-INV-6-OIRIN : OIR: Node 0/0/CPU0 inserted	card in syslog
OIROUT-on-CPU0	handle module out syslog	%PLATFORM-INV-6-OIROUT : OIR: Node 0/0/CPU0 removed	card out syslog
OIROUT-on-CPU0	handle module out syslog	%PLATFORM-INV-6-OIRIN : OIR: Node 0/0/CPU0 inserted	card in syslog
PIM-5-NBRCHG	handle pim neighbor syslog	PIM-5-NBRCHG: neighbor 172.72.73.1 DOWN on MgmtEth0/RSP0/CPU0/1	pim neighbor loss syslog
PIM-5-NBRCHG	handle pim neighbor syslog	PIM-5-NBRCHG: neighbor 192.168.2.1 UP on MgmtEth0/RSP0/CPU0/1	pim neighbor up syslog
PIM-5-UPDOWN	handle pim interface syslog	ROUTING-IPV4_PIM-5-INTCHG : PIM interface GigabitEthernet0/3/0/0 DOWN	pim interface down syslog
PIM-5-UPDOWN	handle pim interface syslog	ROUTING-IPV4_PIM-5-INTCHG : PIM interface GigabitEthernet0/3/0/0 UP	pim interface up syslog
PIM-INVALID-JOIN	handle pim invlid join in syslog	ROUTING-IPV4_PIM-5-INVALID_JP : PIM invalid POS0/2/0/0 J/P message from POS0/2/0/0 with RP address 1.1.1.1	pim invalid join syslog
POWERDOWN-RESET	Indicates that the node will be reset because the user has administratively `power disable' or `no power disable' the node	PLATFORM-SHELFMGR-3-POWERDOWN_RESET : Node 0/0/CPU0 is powered off due to admin power off request	Card oper status changed
POWERDOWN-RESET	Indicates that the node will be reset because the user has administratively `power disable' or `no power disable' the node	PLATFORM-SHELFMGR-3-POWERDOWN_RESET : Node 0/0/CPU0 is powered on due to admin power on request	Card oper status changed
SONET-LOCAL-4-ALARM	The specified SONET Alarm has been declared or released	SONET_LOCAL-4-ALARM : Interface SONET/2/0/0: changed SLOS	Line down syslog
SONET-LOCAL-4-ALARM	The specified SONET Alarm has been declared or released	SONET_LOCAL-4-ALARM : Interface SONET/2/0/0: changed SLOS cleared	Line up syslog
SPA-OIROUT	handle invmgr node state change syslog	<SourceID>LC/0/0/CPU0</SourceID> L2-SPA-5-OIR_REMOVED : SPA removed from bay 0	card out syslog
SPA-OIROUT	handle invmgr node state change syslog	<SourceID>LC/0/0/CPU0</SourceID> L2-SPA-5-OIR_INSERTED : SPA discovered in bay 0	card in syslog
ROUTING-LDP-5-NBR_CHANGE	A LDP neighbor has changed state (up/down). If neighbor has went down, then a reason for session going down is also displayed. This message appears only if the log neighbor command is configured for the LDP process.	ROUTING-LDP-5-NBR_CHANGE : Neighbor 7.7.7.7:0, DOWN	LDP neighbor down syslog
ROUTING-LDP-5-NBR_CHANGE	A LDP neighbor has changed state (up/down). If neighbor has went down, then a reason for session going down is also displayed. This message appears only if the log neighbor command is configured for the LDP process.	gRP/0/RP0/CPU0:Sep 25 14:22:35.329 : mpls_ldp[274]: ROUTING-LDP-5-NBR_CHANGE : Neighbor 7.7.7.7:0, UP	LDP neighbor up syslog
BGP-5-ADJCHANGE	The adjacent BGP neighbor was lost	BGP-5-ADJCHANGE : neighbor 172.23.95.15 Down - BGP Notification received: configuration change	BGP neighbor down syslog
BGP-5-ADJCHANGE	The adjacent BGP neighbor was lost	BGP-5-ADJCHANGE : neighbor 172.23.95.15 Up - BGP Notification received: configuration change	BGP neighbor up syslog
SECURITY-4-AUTHEN_FAILED	The user login authentication failed	SECURITY-login-4-AUTHEN_FAILED. : Failed authentication attempt by user 'user_A' from '161.44.192.231'	Login authentication failed syslog
MGBL-INVENTORY-6-PORTS	Sent by the XR device after a card-in event has occured and the If and Entity tables are in sync. Once Cisco ANA receives the syslog, it will expedite the physical command instead of the card-in syslogs doing the expedite, so that the polling is done only after the tables are synchronized.	%MGBL-INVENTORY-6-PORTS : ifTable INSYNC for card:0/PL7/* entPhysicalIndex:239	If-Table in sync syslog
L2-BFD-6-SESSION_STATE_DOWN	The bfd session is down	%L2-BFD-6-SESSION_STATE_DOWN : BFD session to neighbor 23.1.1.1 on interface GigabitEthernet0/2/0/0 has gone down. Reason: Echo function failed	bfd session down syslog
L2-BFD-6-SESSION_REMOVED	The bfd session has been removed	%L2-BFD-6-SESSION_REMOVED : BFD session to neighbor 23.1.1.1 on interface GigabitEthernet0/2/0/0 has gone down. Reason: Echo function failed	bfd session removed syslog
L2-BFD-6-SESSION_STATE_UP	The bfd session is up	%L2-BFD-6-SESSION_STATE_UP : BFD session to neighbor 23.1.1.1 on interface GigabitEthernet0/2/0/0 has gone down. Reason: Echo function failed	bfd session up syslog
L2-G709-4-ALARM	The specified G709 Alarm has been declared or released	LC/0/0/CPU0:Feb 16 05:36:25.553 : plim_4p_10ge_dwdm[204]: %L2-G709-4-ALARM : DWDM0/0/0/0: LOS	Layer2 G709 alarm syslog
L2-G709-4-ALARM-CLEARED	The specified G709 Alarm has been declared or released	LC/0/0/CPU0:Feb 16 05:36:25.553 : plim_4p_10ge_dwdm[204]: %L2-G709-4-ALARM : DWDM0/0/0/0: LOS cleared	Layer2 G709 clear syslog
L2-DWDM-3-INFO	The DWDM encountered an error that would lead to degraded service	LC/0/0/CPU0:Feb 16 05:36:25.553 : plim_4p_10ge_dwdm[204]: %L2-DWDM-3-INFO dwdm: service degrading error, reason equals ERROR	Layer2 dwdm info syslog
L1-PMENGINE-4-TCA	The specified PM TCA has been declared	%L1-PMENGINE-4-TCA Port [chars] reports [chars] [chars]([chars]) PM TCA with current value [unsigned long long int], threshold [unsigned long long int] in current [chars] interval window	Layer1 PM TCA syslog
L2-SPA-3-POWER_FAILURE	SPA_OK and PWR_OK signals are asserted after the SPA is powered on by LC. These signals are deasserted when there is a power failure on the SPA and this failure indicates that it is an SPA hardware issue. The SPA is put into FAILED state.	%L2-SPA-3-POWER_FAILURE SPA_OK and PWR_OK signal is deasserted on subslot [unsigned int]	Layer2 SPA failure syslog
ROUTING-OSPF-5-ADJCHG	An OSPF routing neighbor has changed state. The message describes the change and the reason for it.	%ROUTING-OSPF-5-ADJCHG : Process 1, Nbr 2.2.2.2 on MgmtEth0/7/CPU0/2 in area 0 from FULL to DOWN, Loading Done,vrf default vrfid 0x60000000	OSPF routing neighbor down syslog
ROUTING-OSPF-5-ADJCHG	An OSPF routing neighbor has changed state. The message describes the change and the reason for it.	%ROUTING-OSPF-5-ADJCHG : Process 1, Nbr 2.2.2.2 on MgmtEth0/7/CPU0/2 in area 0 from LOADING to FULL, Loading Done,vrf default vrfid 0x60000000	OSPF routing neighbor up syslog
OSPFv3-5-ADJCHG-IPv6	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPFv3 neighbor down syslog
OSPFv3-5-ADJCHG-IPv6	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from LOADING to FULL, Neighbor Down: Interface down or detached	OSPFv3 neighbor up syslog
ROUTING-OSPFv3-5-ADJCHG	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%ROUTING-OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from FULL to DOWN, Neighbor Down: Interface down or detached	OSPFv3 routing neighbor down syslog
ROUTING-OSPFv3-5-ADJCHG	An IPv6 OSPFv3 neighbor has changed state. The message describes the change and the reason for it. This message appears only if the log-adjacency-changes command is configured for the OSPF process.	%ROUTING-OSPFv3-5-ADJCHG : Process 1, Nbr 192.168.1.1 on Mg0/5/CPU0/1 from LOADING to FULL, Neighbor Down: Interface down or detached	OSPFv3 routing neighbor up syslog
BGP-5-ADJCHANGE-IPv6	The IPv6 adjacent BGP neighbor was lost	%ROUTING-BGP-5-ADJCHANGE : neighbor 3.3.3.3 down (VRF: default) %ROUTING-BGP-5-ADJCHANGE : neighbor 2001:210:10:1::1 Down - User clear requested	Routing BGP neighbor down syslog
BGP-5-ADJCHANGE-IPv6	The IPv6 adjacent BGP neighbor was lost	%ROUTING-BGP-5-ADJCHANGE : neighbor 3.3.3.3 Up (VRF: default) %ROUTING-BGP-5-ADJCHANGE : neighbor 2001:210:10:1::1 Up	Routing BGP neighbor up syslog
ROUTING-BGP-5-ADJCHANGE	The IPv6 adjacent BGP neighbor was lost	%ROUTING-BGP-5-ADJCHANGE : neighbor 3.3.3.3 down (VRF: default) %ROUTING-BGP-5-ADJCHANGE : neighbor 2001:210:10:1::1 Down - User clear requested	IPv6 Routing BGP neighbor down syslog
ROUTING-BGP-5-ADJCHANGE	The IPv6 adjacent BGP neighbor was lost	%ROUTING-BGP-5-ADJCHANGE : neighbor 3.3.3.3 Up (VRF: default) %ROUTING-BGP-5-ADJCHANGE : neighbor 2001:210:10:1::1 Up	IPv6 Routing BGP neighbor up syslog
L2-L2VPN_PW-3-UPDOWN	The L2VPN Pseudowire went down	%L2-L2VPN_PW-3-UPDOWN : Pseudowire with address 2.2.2.2, id 140, state is Down	pseudo wire tunnel down syslog
L2-L2VPN_PW-3-UPDOWN	The L2VPN Pseudowire went up	%L2-L2VPN_PW-3-UPDOWN : Pseudowire with address 2.2.2.2, id 140, state is Up	pseudo wire tunnel up syslog
ETHER_SERVICE-6-ERR_DISABLED	Service instance shutdown due to errdisable.	%ETHER_SERVICE-6-ERR_DISABLED: Mac security violation - shutdown service instance 900 on interface GigabitEthernet10/0/12	EFP service error disabled syslog
L2-DWDM-3-NOT_YET_IMPLEMENTED	handle L2-DWDM-3-NOT_YET_IMPLEMENTED syslog	%L2-DWDM-3-NOT_YET_IMPLEMENTED dwdm: this function [chars] is not yet implemented	DWDM feature not implemented yet
L2-DWDM-3-FATAL_2	handle L2-DWDM-3-FATAL_2 syslog	%L2-DWDM-3-FATAL_2 dwdm: fatal error encountered, reason equals [chars], errno equals 1	DWDM fatal error with reason and error number
L2-DWDM-3-FATAL	handle L2-DWDM-3-FATAL syslog	%L2-DWDM-3-FATAL dwdm: fatal error encountered, reason equals 1	DWDM fatal error with reason
L2-PLIM-2-EIO_TRAIN	handle L2-PLIM-2-EIO_TRAIN syslog	%L2-PLIM-2-EIO_TRAIN PLA: [chars], [chars]	PLIM EIO training errors syslog
L2-PLIM-3-CHK_ERR	handle L2-PLIM-3-CHK_ERR syslog	%L2-PLIM-3-CHK_ERR PLA: [chars], [chars]	PLIM Checkpoint Initialization Failure syslog
L2-PLIM-3-HW_ERR	handle L2-PLIM-3-HW_ERR syslog	%L2-PLIM-3-HW_ERR asic error: [chars]	PLIM ASIC error syslog
L2-PLIM-3-MEM_ERR	handle L2-PLIM-3-MEM_ERR syslog	%L2-PLIM-3-MEM_ERR [chars]	PLIM memory error syslog
L2-PLIM-3-SQUID_ERR	handle L2-PLIM-3-SQUID_ERR syslog	%L2-PLIM-3-SQUID_ERR [chars]	PLIM squid error syslog
L2-PLIM-7-ERR	handle L2-PLIM-7-ERR syslog	%L2-PLIM-7-ERR [chars]	PLIM 7 error syslog
L2-PLIM_OC768-3-CRITICAL_ERROR	handle L2-PLIM_OC768-3-CRITICAL_ERROR syslog	%L2-PLIM_OC768-3-CRITICAL_ERROR [chars]: [chars]: [hex]	PLIM OC768 critical error syslog
L2-PLIM_OC768-6-INFO	handle L2-PLIM_OC768-6-INFO syslog	%L2-PLIM_OC768-6-INFO [chars]: [chars]	PLIM OC768 INFO syslog
L2-PLIM_OC768-7-DEBUG_MSG	handle L2-PLIM_OC768-7-DEBUG_MSG syslog	%L2-PLIM_OC768-7-DEBUG_MSG Debug: [chars]: [chars] errno 1	PLIM OC768 debug syslog
BGP-3-NOTIFICATION	handle BGP 3 syslog	%BGP-3-NOTIFICATION: sent to neighbor 10.10.10.254 4/0 (hold time expired) 0 bytes	BGP notification syslog
BGP-3-NOTIFICATION	handle BGP 3 syslog	%BGP-3-NOTIFICATION: sent to neighbor 10.10.10.254 4/0 (hold time expired) 0 bytes	BGP notification syslog

Cisco ASR 9000 Syslog Registry Parameters

Table 37-4 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Cisco ASR syslogs shown in Table 37-1.

Table 37-4 Cisco ASR Syslog Registry Parameters  

Short Description	Event Type	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
Power supply inserted syslog	power supply removed syslog	power supply inserted syslog	inserted	N	IModule	F	F	F	0	F	clr	F	T	F
Power supply removed syslog	power supply removed syslog	power supply removed syslog	removed	N	IModule	F	F	F	0	F	maj	T	T	F
Backup to Master change syslog	Backup to Master syslog	Backup to Master syslog	Backup	N	IIPInterface	F	F	F	0	F	info	T	T	F
Master to Backup change syslog	Backup to Master syslog	Master to Backup syslog	Master	N	IIPInterface	F	F	F	0	F	info	T	T	F
BFD rate limit high warning syslog	bfd rate limit high warning syslog	bfd rate limit high warning syslog	N/A	N	IBfdService	F	F	F	0	T	wrn	F	T	F
RIP authentication failed syslog	rip authentication failed syslog	rip authentication failed syslog	N/A	N	IIPInterface	F	F	F	0	T	min	F	T	F
RIP configuration error syslog	rip configuration error syslog	rip configuration error syslog	N/A	N	IManagedElement	F	F	F	0	T	min	F	T	F
RIP out of memory event syslog	rip out of memory event syslog	rip out of memory event syslog	N/A	N	IManagedElement	F	F	F	0	F	info	F	T	F
routing ISIS neighbor down syslog	routing isis neighbor down syslog	routing isis neighbor down syslog	down	N	IPhysicalLayer	F	T	F	0	F	maj	F	T	F
routing ISIS neighbor up syslog	routing isis neighbor down syslog	routing isis neighbor up syslog	up	N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F

Cisco IOS Syslog Registry Parameters

Table 37-5 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Cisco IOS syslogs shown in Table 37-2.

Table 37-5 Cisco IOS Registry Parameters  

Short Description	Event Type	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
Link down syslog	link down syslog	link down syslog		mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bun \dle-status/mpls traffic engineering tunnel information/ip interface oper status	IIPInterface	F	T	F	0	T	maj	F	T	T
Link up syslog	link down syslog	link up syslog		mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bun \dle-status/mpls traffic engineering tunnel information/ip interface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
FR DLCI down syslog	dlci change syslog	dlci down		N	IPhysicalLayer	T	T	F	0	T	maj	F	T	F
FR DLCI up syslog	dlci change syslog	dlci up		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
HSRP group change syslog	hsrp syslog	hsrp group change syslog		hsrp	IIPInterface	F	T	F	0	F	info	F	T	F
HSRP group restored syslog	hsrp syslog	hsrp group restored syslog		hsrp	IIPInterface	F	F	F	0	F	clr	F	T	F
SNMP message has not properly authenticated	snmp 5 snmp auth fail syslog	snmp 5 snmp auth fail syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
Memory allocation is not available	memory allocation syslog	memory allocation syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
process ran too long	process ran too long syslog	process ran too long syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
registered timer is expired	registered timer expired syslog	registered timer expired syslog		N	IManagedElement	F	T	F	0	F	min	F	T	F
EIGRP router query to neighbors timeouted syslog	EIGRP router query to neighbors timeouted syslog	EIGRP router query to neighbors timeouted syslog		N	IManagedElement	T	T	F	0	F	info	F	T	F
Ethernet cable is not connected	ethernet cable is not connected syslog	ethernet cable is not connected syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
frame with an invalid control code	frmr report syslog	frmr report syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Interface changed to non trunk	dtp 5 non port trunk syslog	dtp 5 non port trunk syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Interface changed to trunk	dtp 5 non port trunk syslog	dtp 5 port trunk syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Line down syslog	line down syslog	line down syslog		basetech-lldp-neighbors-snmp/basetech-cdp-neighbors-snmp/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls trafficengineering tunnel information/port-status/ip interface oper status	IIPInterface	F	T	F	0	T	maj	F	T	T
Line up syslog	line down syslog	line up syslog		basetech-lldp-neighbors-snmp/basetech-cdp-neighbors-snmp/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls trafficengineering tunnel information/port-status/ip interface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
Cannot send incremental SAP update to peer	ipx 3 bad igrp sap syslog	ipx 3 bad igrp sap syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
An Ethernet cable is broken or unterminated	lance 5 coll syslog	lance 5 coll syslog		N	IManagedElement	F	T	F	0	F	info	F	T	F
An Ethernet transceiver is unplugged or defective	lance 5 late coll syslog	lance 5 late coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
Device configuration changed	sys 5 config i syslog	sys 5 config i syslog		N	IManagedElement	F	F	F	0	F	info	F	T	F
AppleTalk invalid network number	at 6 node wrong syslog	at 6 node wrong syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
security port shut down	security 1 port shut down syslog	security 1 port shut down syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
BPDU spanning-tree portfast enabled	span tree 2 rx port fast syslog	span tree 2 rx port fast syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Fault has been detected in a fiber Ethernet port connection	udld 3 disable syslog	udld 3 disable syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Unidirectional link detected	udld 3 disable fail syslog	udld 3 disable fail syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Fault has been detected in a fiber Ethernet connection	udld 4 one way path syslog	udld 4 one way path syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
OSPF neighbor down syslog	ospf neighbor syslog	ospf neighbor down syslog		N	IIPInterface	T	T	F	0	F	maj	T	T	F
OSPF neighbor up syslog	ospf neighbor syslog	ospf neighbor up syslog		N	IIPInterface	F	F	F	0	F	clr	F	T	F
No BPDUs were received on port	span tree 2 loop guard block syslog	span tree 2 loop guard block syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
BPDUs were received on port	span tree 2 loop guard un block syslog	span tree 2 loop guard un block syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Ethernet is seeing multiple collisions	amdp2 fe 5 coll syslog	amdp2 fe 5 coll syslog		N	IPhysicalLayer	F	T	F	0	F	info	F	T	F
Fast Ethernet packet has been dropped	dec 21140-5 coll syslog	dec 21140-5 coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
An Ethernet cable is broken	ilacc 5 coll syslog	ilacc 5 coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
pquicc 5 coll syslog: An Ethernet cable is broken	pquicc 5 coll syslog	pquicc 5 coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
pquicc ether 5 coll syslog: An Ethernet cable is broken	pquicc ether 5 coll syslog	pquicc ether 5 coll syslog		N	IManagedElement	F	F	F	0	T	min	F	T	F
Ethernet is detecting multiple collisions	pquicc fe 5 coll syslog	pquicc fe 5 coll syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
quicc ether 5 coll syslog: An Ethernet cable is broken	quicc ether 5 coll syslog	quicc ether 5 coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
Late collisions have occurred	amdp2 fe 5 latecoll syslog	amdp2 fe 5 latecoll syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
IS-IS neighbor down syslog	is is neighbor down syslog	is is neighbor down syslog		N	IPhysicalLayer	F	T	F	0	F	maj	F	T	F
IS-IS neighbor up syslog	is is neighbor down syslog	is is neighbor up syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Late collisions have occurred	dec 21140-5 late coll syslog	dec 21140-5 late coll syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
ilacc 5 late coll syslog: Late collisions have occurred	ilacc 5 late coll syslog	ilacc 5 late coll syslog		N	IManagedElement	F	F	F	0	T	min	F	T	F
pquicc 5 late coll syslog: Late collisions have occurred	pquicc 5 late coll syslog	pquicc 5 late coll syslog		N	IManagedElement	F	F	F	0	T	min	F	T	F
A new network may not have been engineered properly	pquicc ether 5 late coll syslog	pquicc ether 5 late coll syslog		N	IManagedElement	F	T	F	0	T	min	F	T	F
pquicc fe 5 late coll syslog: Late collisions have occurred	pquicc fe 5 late coll syslog	pquicc fe 5 late coll syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
quicc ether 5 late coll syslog: Late collisions have occurred	quicc ether 5 late coll syslog	quicc ether 5 late coll syslog		N	IManagedElement	F	F	F	0	T	min	F	T	F
Link trap down has occurred	snmp 5 link trap syslog	snmp 5 link trap down syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Link trap up has occurred	snmp 5 link trap syslog	snmp 5 link trap up syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
configured port changed state from learning to forwarding	snmp 5 top trap syslog	snmp 5 top trap syslog		N	IManagedElement	F	F	F	0	T	min	F	T	F
DUAL 5 neighbor down syslog	dual5 neighbor change	dual5 neighbor down		N	IPhysicalLayer	T	T	F	0	F	maj	F	T	F
DUAL 5 neighbor up syslog	dual5 neighbor change	dual5 neighbor up		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Link down syslog	link down syslog	link down syslog		ce-qinq-status-telnet/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls traffic engineering tunnel information/ipinterface oper status	IIPInterface	F	T	F	0	T	maj	F	T	T
Link up syslog	link down syslog	link up syslog		ce-qinq-status-telnet/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls traffic engineering tunnel information/ipinterface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
BGP neighbor down syslog	bgp neighbor down syslog	bgp neighbor down syslog		bgp neighbours	IMpBgpOid	F	T	F	0	T	maj	F	T	F
BGP neighbor up syslog	bgp neighbor down syslog	bgp neighbor up syslog		bgp neighbours	IMpBgpOid	F	F	F	0	F	clr	F	T	F
BGP neighbor down syslog	bgp neighbor down syslog	bgp neighbor down syslog		bgp neighbours	IMpBgpOid	F	T	F	0	T	maj	F	T	F
BGP neighbor up syslog	bgp neighbor down syslog	bgp neighbor up syslog		bgp neighbours	IMpBgpOid	F	F	F	0	F	clr	F	T	F
card in syslog	card out syslog	card in syslog		physical-command	IModule	F	F	F	0	F	clr	F	T	T
card out syslog	card out syslog	card out syslog		physical-command	IModule	F	T	F	0	T	maj	F	T	T
oir sp 3 power cycle syslog	oir sp 3 power cycle	oir sp 3 power cycle		N	IModule	F	F	F	0	F	info	F	T	F
Reloading device syslog	reloading device syslog	reloading device syslog		N	IManagedElement	F	F	T	200000	F	info	T	T	T
System restart	system restart syslog	system restart syslog		physical-command	IManagedElement	F	F	F	0	F	info	F	T	T
Interface changed to non trunk	dtp 5 non port trunk syslog	dtp 5 non port trunk syslog		N	IPhysicalLayer	F	T	F	0	T	min	F	T	F
Interface changed to trunk	dtp 5 non port trunk syslog	dtp 5 port trunk syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
ISDN connect syslog	isdn 6 connect syslog	isdn 6 connect syslog		N	IPhysicalLayer	F	T	F	0	T	maj	F	T	F
ISDN disconnect syslog	isdn 6 connect syslog	isdn 6 disconnect syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
ISDN connect syslog	isdn 6 connect syslog	isdn 6 connect syslog		N	IPhysicalLayer	F	T	F	0	T	maj	F	T	F
ISDN disconnect syslog	isdn 6 connect syslog	isdn 6 disconnect syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Duplex mismatch discovered	duplex mismatch	duplex mismatch		N	IPhysicalLayer	F	T	F	0	F	info	F	T	F
ISDN connect syslog	isdn 6 connect syslog	isdn 6 connect syslog		N	IPhysicalLayer	F	T	F	0	T	maj	F	T	F
ISDN disconnect syslog	isdn 6 connect syslog	isdn 6 disconnect syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
ISDN connect syslog	isdn 6 connect syslog	isdn 6 connect syslog		N	IPhysicalLayer	F	T	F	0	T	maj	F	T	F
ISDN disconnect syslog	isdn 6 connect syslog	isdn 6 disconnect syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
TDP neighbor down syslog	tdp neighbor down syslog	tdp neighbor down syslog		label switching table	ILseOid	F	T	F	0	F	maj	F	T	F
TDP neighbor up syslog	tdp neighbor down syslog	tdp neighbor up syslog		label switching table	ILseOid	F	F	F	0	F	clr	F	T	F
LDP neighbor down syslog	ldp neighbor down syslog	ldp neighbor down syslog		mpls interfaces	ILseOid	F	T	F	0	T	maj	F	T	F
LDP neighbor up syslog	ldp neighbor down syslog	ldp neighbor up syslog		mpls interfaces	ILseOid	F	F	F	0	F	clr	F	T	F
MPSL-TE tunnel reoptimized/rerouted syslog	mpls te tunnel reoptimized syslog	mpls te tunnel reoptimized syslog		N	IMplsTETunnel	T	T	F	0	F	info	T	T	F
MPLS TE tunnel down syslog	mpls te tunnel down syslog	mpls te tunnel down syslog		mpls traffic engineering tunnel information	IMplsTETunnel	F	T	F	0	T	maj	F	T	F
MPLS TE tunnel up syslog	mpls te tunnel down syslog	mpls te tunnel up syslog		mpls traffic engineering tunnel information	IMplsTETunnel	F	F	F	0	F	clr	F	T	F
MPLS TE tunnel down syslog	mpls te tunnel down syslog	mpls te tunnel down syslog		mpls traffic engineering tunnel information	IMplsTETunnel	F	T	F	0	T	maj	F	T	F
MPLS TE tunnel up syslog	mpls te tunnel down syslog	mpls te tunnel up syslog		mpls traffic engineering tunnel information	IMplsTETunnel	F	F	F	0	F	clr	F	T	F
A power supply is not working or has not been turned on	environment monitoring 2 supply syslog	environment monitoring 2 supply		N	IManagedElement	F	F	F	0	F	info	F	T	F
System restart	system sp restart syslog	system sp restart syslog		N	IManagedElement	F	F	F	0	F	info	F	T	F
Aggressive Mode Failure Detected	udld sp 4 disable syslog	udld sp 4 disable syslog		N	IPhysicalLayer	F	T	F	0	F	info	F	T	F
fabric sp 5 clear block down syslog	fabric sp 5 clear block off syslog	fabric sp 5 clear block off syslog		N	IPhysicalLayer	F	T	F	0	F	info	F	T	F
fabric sp 5 clear block up syslog	fabric sp 5 clear block off syslog	fabric sp 5 clear block on syslog		N	IPhysicalLayer	F	F	F	0	F	info	F	T	F
c6kenv sp 4 fan tray fail syslog	c6kenv sp 4 fan tray fail	c6kenv sp 4 fan tray fail		N	IManagedElement	F	F	F	0	F	info	F	T	F
pfredun sp 4 bootstring invalid syslog	pfredun sp 4 bootstring invalid	pfredun sp 4 bootstring invalid		N	IManagedElement	F	F	F	0	F	info	F	T	F
Power supply failed syslog	power supply failure syslog	power supply failed syslog		N	IPhysicalLayer	F	F	F	0	T	maj	F	T	F
Power supply okay syslog	power supply failure syslog	power supply okay syslog		N	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
pm sp stdby 4 err disable syslog	pm sp stdby 4 err disable	pm sp stdby 4 err disable		N	IPhysicalLayer	F	F	F	0	F	info	F	T	F
HSRP group change syslog	hsrp syslog	hsrp group change syslog		hsrp	IPhysicalLayer	F	T	F	0	F	info	F	T	F
HSRP group restored syslog	hsrp syslog	hsrp group restored syslog		hsrp	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
BGP notification syslog	bgp notification syslog	bgp notification syslog		N	IPhysicalLayer	T	T	F	0	F	info	F	T	F
new ethernet channel interface for VSL connection	VSL-connection-new-interface-syslog	VSL connection new interface		N	IManagedElement	F	F	F	110000	F	info	T	T	F
VSL link up syslog	VSL-link-state-change-syslog	VSL link up syslog		N	IManagedElement	F	F	F	110000	F	info	T	T	F
VSL link down syslog	VSL-link-state-change-syslog	VSL link down syslog		N	IManagedElement	F	F	F	110000	F	info	T	T	F
VSL link up syslog: active switch is #1	VSL-link-state-change-syslog	VSL link up and switch 1 is active		N	IShelf	F	F	F	110000	F	info	T	T	F
VSL link up syslog: active switch is #2	VSL-link-state-change-syslog	VSL link up and switch 2 is active		N	IShelf	F	F	F	110000	F	info	T	T	F
role mismatch resolved syslog, sent from active switch #1	VSL-role-mismatch-resolved-syslog	VSL role mismatch resolved sent from active switch 1		N	IShelf	F	F	F	110000	F	info	T	T	F
role mismatch resolved syslog, sent from active switch #2	VSL-role-mismatch-resolved-syslog	VSL role mismatch resolved sent from active switch 2		N	IShelf	F	F	F	110000	F	info	T	T	F
env sp 4 fan tray fail syslog	env sp 4 fan tray fail	env sp 4 fan tray fail		N	IManagedElement	F	F	F	0	F	info	F	T	F
pwr sp 2 power supply fail syslog	pwr sp 2 power supply fail	pwr sp 2 power supply fail		N	IManagedElement	F	F	F	0	F	info	T	T	F
BGP neighbor down syslog	bgp neighbor down syslog	bgp neighbor down syslog		bgp neighbours, BFD	IMpBgpOid	F	T	F	0	T	maj	F	T	F
BGP neighbor up syslog	bgp neighbor down syslog	bgp neighbor up syslog		bgp neighbours, BFD	IMpBgpOid	F	F	F	0	F	clr	F	T	F
VRRP State Changed syslog	vrrp state changed syslog	vrrp state changed syslog		N	IManagedElement	F	F	F	0	F	info	T	T	F
Ima Link Status Change Down Syslog	Ima Link Status Change Down Syslog	Ima Link Status Change Down Syslog			IPhysicalLayer	F	T	F	0	F	maj	T	T	T
Ima Link Status Change Up Syslog	Ima Link Status Change Down Syslog	Ima Link Status Change Up Syslog			IPhysicalLayer	F	F	F	0	F	clr	F	T	T
IMA Active Link Change Syslog	IMA Active Link Change Syslog	IMA Active Link Change Syslog		mtop-ima-group-state,port-status	IMAGroupOid	F	F	F	0	F	info	F	T	F
Native VLAN mismatch discovered	native VLAN mismatch	native VLAN mismatch		N	IPhysicalLayer	F	T	F	0	F	info	F	T	F
Clock status change syslog	clock status change syslog	clock status change syslog		N	defaultClockDC	F	T	F	0	F	info	F	T	F
Clock source change syslog	clock source change syslog	clock source change syslog		N	defaultClockDC	F	T	F	0	F	info	F	T	F
pseudo wire tunnel down syslog	pseudo wire tunnel syslog	pseudo wire tunnel down syslog		ce-pw-tunnel-status-telnet	PTPLayer2MplsTunnel	F	T	F	0	F	min	T	T	T
pseudo wire tunnel up syslog	pseudo wire tunnel syslog	pseudo wire tunnel up syslog		ce-pw-tunnel-status-telnet	PTPLayer2MplsTunnel	F	F	F	0	F	clr	T	T	T
EFP service error disabled syslog	efp service error disabled syslog	efp service error disabled syslog		EFP status	IEFP	F	T	F	0	F	info	F	T	F
EFP down syslog	efp down syslog	efp down syslog		EFP status	IEFP	F	T	F	0	T	maj	F	T	F
EFP up syslog	efp down syslog	efp up syslog		EFP status	IEFP	F	T	F	0	F	clr	F	T	F
REP link not operational syslog	REP link operational status change	REP link not operational		Rep status	IREPService	F	T	F	0	T	min	F	T	F
REP link operational syslog	REP link operational status change	REP link operational		Rep status	IREPService	F	F	F	0	F	clr	F	T	F
OSPFv3 neighbor down syslog	ospfv3 neighbor syslog	ospfv3 neighbor down syslog	Down / DOWN	N	IManagedElement	T	T	F	0	F	maj	T	T	F
OSPFv3 neighbor up syslog	ospfv3 neighbor syslog	ospfv3 neighbor up syslog	Up / FULL	N	IManagedElement	F	F	F	0	F	clr	F	T	F
CFM enter AIS defect syslog	CFM enter AIS defect syslog	CFM enter AIS defect syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM exit AIS defect syslog	CFM enter AIS defect syslog	CFM exit AIS defect syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM enter AIS defect syslog	CFM enter AIS defect syslog	CFM enter AIS defect syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM exit AIS defect syslog	CFM enter AIS defect syslog	CFM exit AIS defect syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface enter AIS defect syslog	CFM interface enter AIS syslog	CFM interface enter AIS syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface exit AIS defect syslog	CFM interface exit AIS syslog	CFM interface exit AIS syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface enter AIS defect syslog	CFM interface enter AIS syslog	CFM interface enter AIS syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface exit AIS defect syslog	CFM interface exit AIS syslog	CFM interface exit AIS syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM enter LCK defect syslog	CFM enter LCK defect syslog	CFM enter LCK defect syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM exit LCK defect syslog	CFM enter LCK defect syslog	CFM exit LCK defect syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface enter LCK syslog	CFM interface enter LCK defect syslog	CFM interface enter LCK defect syslog	ENTER	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM interface exit LCK syslog	CFM interface enter LCK defect syslog	CFM interface exit LCK defect syslog	EXIT	N	ICfmServiceOid	F	T	F	0	F	info	F	T	F
CFM Mep Down syslog	Mep Down syslog	Mep Down syslog	DOWN	N	ICfmMaintenanceAssociationOid	F	T	F	0	T	minor	F	T	F
CFM Mep Up syslog	Mep Down syslog	Mep Up syslog	UP	N	ICfmMaintenanceAssociationOid	F	F	F	0	F	clr	F	T	F
CFM Mep Down syslog	Mep Down syslog	Mep Down syslog	DOWN	N	ICfmMaintenanceAssociationOid	F	T	F	0	T	minor	F	T	F
CFM Mep Up syslog	Mep Down syslog	Mep Up syslog	UP	N	ICfmMaintenanceAssociationOid	F	F	F	0	F	clr	F	T	F
CFM Mep Down syslog	Mep Down syslog	Mep Down syslog	DOWN	N	ICfmMaintenanceAssociationOid	F	T	F	0	T	minor	F	T	F
CFM Mep Up syslog	Mep Down syslog	Mep Up syslog	UP	N	ICfmMaintenanceAssociationOid	F	F	F	0	F	clr	F	T	F
OSPFv3 neighbor down syslog	ospfv3 neighbor syslog	ospfv3 neighbor down syslog	Down / DOWN	N	IManagedElement	T	T	F	0	F	maj	T	T	F
OSPFv3 neighbor up syslog	ospfv3 neighbor syslog	ospfv3 neighbor up syslog	Up / FULL	N	IManagedElement	F	F	F	0	F	clr	F	T	F
Timing over packet application down syslog	timing over packet application down syslog	timing over packet application down syslog	down	N	IManagedElement	F	F	F	0	F	min	T	T	T
Timing over packet application up syslog	timing over packet application down syslog	timing over packet application up syslog	up	N	IManagedElement	F	F	F	0	F	clr	F	T	T
HSRP group change syslog	hsrp syslog	hsrp group change syslog		hsrp	IPhysicalLayer	F	T	F	0	F	info	F	T	F
HSRP group restored syslog	hsrp syslog	hsrp group restored syslog		hsrp	IPhysicalLayer	F	F	F	0	F	clr	F	T	F
Layer2 G709 alarm syslog	layer2 G709 alarm syslog	layer2 G709 alarm syslog	declared	N	DWDM Oid	F	F	F	0	T	wrn	F	T	F
Layer2 G709 clear syslog	layer2 G709 alarm syslog	layer2 G709 clear syslog	cleared	N	DWDM Oid	F	F	F	0	F	clr	F	T	F

Cisco IOX Syslog Registry Parameters

Table 37-1 lists the associated event types, event subtypes, and Cisco ANA registry parameters for the Cisco IOX syslogs shown in Table 37-1.

Table 37-6 Cisco IOX Registry Parameters  

Short Description	Event Type	Event Subtype	Subtype Value	Expedites Polling	Event Source (IMO Name)	Activate Flow	Correlate	Is Correlation Allowed	Weight	Auto Clear	Severity	Is Ticketable	Auto Remove	Flapping
Link down syslog	link down syslog	link down syslog	down / Down	ce-qinq-status-telnet/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls traffic engineering tunnel information/ipinterface oper status	IIPInterface	F	T	F	0	T	maj	F	T	T
Link up syslog	link down syslog	link up syslog	up / Up	ce-qinq-status-telnet/mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls traffic engineering tunnel information/ipinterface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
Link down syslog	link down syslog	link down syslog	down / Down	ip interface oper status	IIPInterface	F	T	F	0	T	maj	F	T	T
Link up syslog	link down syslog	link up syslog	up / Up	mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mtop-cem-group-status/bundle-status/mpls traffic engineering tunnel information/ip interface oper status	IIPInterface	F	F	F	0	F	clr	F	T	T
Line down syslog	line down syslog	line down syslog	down / Down	mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mpls traffic engineering tunnel information / port-status/ip interface oper status	IPortLayer1	F	T	F	0	T	maj	F	T	T
Line up syslog	line down syslog	line up syslog	up / Up	mtop-mlpppbundle-status-telnet/mtop-ima-group-state-telnet/mpls traffic engineering tunnel information / port-status/ip interface oper status	IPortLayer1	F	F	F	0	F	clr	F	T	T
OSPF neighbor down syslog	ospf neighbor syslog	ospf neighbor down syslog	Down	N	IIPInterface	T	T	F	0	F	maj	T	T	F
OSPF neighbor up syslog	ospf neighbor syslog	ospf neighbor up syslog	Up / LOADING to FULL	N	IIPInterface	F	F	F	0	F	clr	F	T	F
envmon powersupply syslog	envmon powersupply syslog	envmon powersupply syslog	N/A	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon condition syslog	envmon condition syslog	envmon condition syslog	ENV_CONDITION	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon condition clear syslog	envmon condition syslog	envmon condition clear syslog	ENV_CONDITION_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon fan syslog	envmon fan syslog	envmon fan syslog	FAN	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon fan clear syslog	envmon fan syslog	envmon fan clear syslog	FAN_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon fan syslog	envmon fan syslog	envmon fan syslog	N/A	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon tempretaure syslog	envmon tempretaure syslog	envmon tempretaure syslog	OVERTEMP	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon tempretaure clear syslog	envmon tempretaure syslog	envmon tempretaure clear syslog	OVERTEMP_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
card out syslog	card out syslog	card out syslog	REMOVE	physical-command	IManagedElement	F	T	F	0	T	maj	F	T	T
card in syslog	card out syslog	card in syslog	INSERT	physical-command	IManagedElement	F	F	F	0	F	clr	F	T	T
envmon powersupply syslog	envmon powersupply syslog	envmon powersupply syslog	POWERSUPPLY_CURRENT	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon powersupply clear syslog	envmon powersupply syslog	envmon powersupply clear syslog	POWERSUPPLY_CURRENT_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon powersupply syslog	envmon powersupply syslog	envmon powersupply syslog	POWERSUPPLY_NONOP	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon powersupply clear syslog	envmon powersupply syslog	envmon powersupply clear syslog	POWERSUPPLY_NONOP_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon powersupply syslog	envmon powersupply syslog	envmon powersupply syslog	POWERSUPPLY_VOLTAGE	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon powersupply clear syslog	envmon powersupply syslog	envmon powersupply clear syslog	POWERSUPPLY_VOLTAGE_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon tempretaure syslog	envmon tempretaure syslog	envmon tempretaure syslog	TEMP	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon tempretaure clear syslog	envmon tempretaure syslog	envmon tempretaure clear syslog	TEMP_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
envmon powersupply syslog	envmon powersupply syslog	envmon powersupply syslog	VOLTAGE	N	IManagedElement	F	T	T	0	T	maj	F	T	F
envmon powersupply clear syslog	envmon powersupply syslog	envmon powersupply clear syslog	VOLTAGE_CLEAR-	N	IManagedElement	F	F	F	0	F	clr	F	T	F
fabric hardware syslog	fabric hardware syslog	fabric hardware syslog	FIAHW_LOS	N	IManagedElement	F	T	T	0	T	maj	F	T	F
fabric hardware clear syslog	fabric hardware syslog	fabric hardware clear syslog	FIAHW_LOS_CLEAR	N	IManagedElement	F	F	F	0	F	clr	F	T	F
flash card removed syslog	flash card removed syslog	flash card removed syslog	UNAVAILABLE	N	IManagedElement	F	T	T	0	T	maj	F	T	F
flash card inserted syslog	flash card removed syslog	flash card inserted syslog	SWAPPED	N	IManagedElement	F	F	F	0	F	clr	F	T	F
Memory allocation is not available	memory allocation syslog	memory allocation syslog	N/A	N	IManagedElement	F	T	F	0	T	min	F	T	F
Module reset syslog	reset module syslog	reset module syslog	N/A	N	IManagedElement	F	T	T	0	F	info	T	T	T
Card oper status changed	card down syslog	card down syslog	UNPOWERED / DOWN / BRINGDOWN / NOT / DISABLED	card status	IModule	F	T	F	0	T	min	F	T	T
Card oper status changed	card down syslog	card up syslog	IOS XR RUN / OK	card status	IModule	F	F	F	0	F	clr	F	T	T
card out syslog	card out syslog	card out syslog	OIROUT	physical-command	IModule	F	T	F	0	T	maj	F	T	T
card in syslog	card out syslog	card in syslog	OIRIN	N	IModule	F	F	F	0	F	clr	F	T	T
card out syslog	card out syslog	card out syslog	OIROUT	physical-command	IModule	F	T	F	0	T	maj	F	T	T
card in syslog	card out syslog	card in syslog	OIRIN	N	IModule	F	F	F	0	F	clr	F	T	T
pim neighbor loss syslog	pim neighbor loss syslog	pim neighbor loss syslog	DOWN	N	IIPInterface	F	T	F	0	F	maj	F	T	F
pim neighbor up syslog	pim neighbor loss syslog	pim neighbor up syslog	UP	N	IIPInterface	F	F	F	0	F	clr	F	T	F
pim interface down syslog	pim interface down syslog	pim interface down syslog	DOWN	N	IManagedElement	F	T	F	0	T	maj	F	T	F
pim interface up syslog	pim interface down syslog	pim interface up syslog	UP	N	IManagedElement	F	F	F	0	F	clr	F	T	F
pim invalid join syslog	pim invalid join syslog	pim invalid join syslog	N/A	N	IManagedElement	F	T	F	0	T	min	F	T	F
Card oper status changed	card down syslog	card down syslog	off	N	IManagedElement	F	T	F	0	T	min	F	T	T
Card oper status changed	card down syslog	card up syslog	on	N	IManagedElement	F	F	F	0	F	clr	F	T	T
Line down syslog	line down syslog	line down syslog	N/A	N	IPortLayer1	F	T	F	0	T	maj	F	T	T
Line up syslog	line down syslog	line up syslog	cleared	N	IPortLayer1	F	F	F	0	F	clr	F	T	T
card out syslog	card out syslog	card out syslog	REMOVED	physical-command	IModule	F	T	F	0	T	maj	F	T	T
card in syslog	card out syslog	card in syslog	INSERTED	N	IModule	F	F	F	0	F	clr	F	T	T
LDP neighbor down syslog	ldp neighbor down syslog	ldp neighbor down syslog	DOWN	mpls interfaces, label switching table, mpls-ldp-peers	IProfileContainer (LSE)	F	T	F	0	T	maj	F	T	F
LDP neighbor up syslog	ldp neighbor down syslog	ldp neighbor up syslog	UP	mpls interfaces, label switching table, mpls-ldp-peers	IProfileContainer (LSE)	F	F	F	0	F	clr	F	T	F
BGP neighbor down syslog	bgp neighbor down syslog	bgp neighbor down syslog	down / Down	bgp neighbours	IBgpNeighbourEntry	F	T	F	0	T	maj	F	T	F
BGP neighbor up syslog	bgp neighbor down syslog	bgp neighbor up syslog	up / Up	bgp neighbours	IBgpNeighbourEntry	F	F	F	0	F	clr	F	T	F
Login authentication failed syslog	login authentication failed syslog	login authentication failed syslog	N/A	N	IManagedElement	F	F	F	0	F	min	T	T	F
If-Table in sync syslog	if table in sync syslog	if table in sync syslog	N/A	physical-command	IModule	F	T	F	0	F	info	F	T	F
bfd session down syslog	bfd session down syslog	bfd session down syslog	down	bfd session	IBfdService	F	T	F	0	T	maj	F	T	F
bfd session removed syslog	bfd session down syslog	bfd session removed syslog	removed	bfd session	IBfdService	F	T	F	0	T	maj	F	T	F
bfd session up syslog	bfd session down syslog	bfd session up syslog	up	bfd session	IBfdService	F	F	F	0	F	clr	F	T	F
Layer2 G709 alarm syslog	layer2 G709 alarm syslog	layer2 G709 alarm syslog	N/A	N	DWDM Oid	F	F	F	0	T	wrn	F	T	F
Layer2 G709 clear syslog	layer2 G709 alarm syslog	layer2 G709 clear syslog	cleared	N	DWDM Oid	F	F	F	0	F	clr	F	T	F
Layer2 dwdm info syslog	layer2 dwdm info syslog	layer2 dwdm info syslog	N/A	N	IManagedElement	F	F	F	0	T	min	F	T	F
Layer1 PM TCA syslog	layer1 PM TCA syslog	layer1 PM TCA syslog	N/A	N	DWDM Oid	F	F	F	0	T	wrn	F	T	F
Layer2 SPA failure syslog	layer2 SPA failure syslog	layer2 SPA failure syslog	N/A	N	IManagedElement	F	T	F	0	T	min	F	T	F
OSPF routing neighbor down syslog	ospf routing neighbor syslog	ospf routing neighbor down syslog	Down/DOWN	N	IIPInterface	T	T	F	0	F	maj	T	T	F
OSPF routing neighbor up syslog	ospf routing neighbor syslog	ospf routing neighbor up syslog	Up / LOADING to FULL	N	IIPInterface	F	F	F	0	F	clr	F	T	F
OSPFv3 neighbor down syslog	ospfv3 neighbor syslog	ospfv3 neighbor down syslog	Down / DOWN	N	IManagedElement	T	T	F	0	F	maj	T	T	F
OSPFv3 neighbor up syslog	ospfv3 neighbor syslog	ospfv3 neighbor up syslog	Up / FULL	N	IManagedElement	F	F	F	0	F	clr	F	T	F
OSPFv3 routing neighbor down syslog	ospfv3 routing neighbor down syslog	ospfv3 routing neighbor down syslog	Down / DOWN	N	IManagedElement	F	T	F	0	F	maj	T	T	F
OSPFv3 routing neighbor up syslog	ospfv3 routing neighbor down syslog	ospfv3 routing neighbor up syslog	Up / FULL	N	IManagedElement	F	F	F	0	F	clr	F	T	F
Routing BGP neighbor down syslog	routing bgp neighbor down syslog	routing bgp neighbor down syslog	down / Down	N	IBgpNeighbourEntry	F	T	F	0	F	maj	F	T	F
Routing BGP neighbor up syslog	routing bgp neighbor down syslog	routing bgp neighbor up syslog	up / Up	N	IBgpNeighbourEntry	F	F	F	0	F	clr	F	T	F
IPv6 Routing BGP neighbor down syslog	ipv6 routing bgp neighbor down syslog	ipv6 routing bgp neighbor down syslog	down / Down	N	IManagedElement	F	T	F	0	F	maj	F	T	F
IPv6 Routing BGP neighbor up syslog	ipv6 routing bgp neighbor down syslog	ipv6 routing bgp neighbor up syslog	up / Up	N	IManagedElement	F	F	F	0	F	clr	F	T	F
pseudo wire tunnel down syslog	pseudo wire tunnel syslog	pseudo wire tunnel down syslog		ce-pw-tunnel-status-telnet	PTPLayer2MplsTunnel	F	T	F	0	F	min	T	T	T
pseudo wire tunnel up syslog	pseudo wire tunnel syslog	pseudo wire tunnel up syslog		ce-pw-tunnel-status-telnet	PTPLayer2MplsTunnel	F	F	F	0	F	clr	T	T	T
EFP service error disabled syslog	efp service error disabled syslog	efp service error disabled syslog		EFP status	IEFP	F	T	F	0	F	info	F	T	F
DWDM feature not implemented yet	Dwdm not implemented syslog	Dwdm not implemented syslog		N	IManagedElement	F	F	F	0	T	wrn	false	T	F
DWDM fatal error with reason and error number	DWDM fatal error 2 syslog	DWDM fatal error 2 syslog		N	IManagedElement	F	F	F	0	T	maj	false	T	F
DWDM fatal error with reason	DWDM fatal error syslog	DWDM fatal error 2 syslog		N	IManagedElement	F	F	F	0	T	maj	false	T	F
PLIM EIO training errors syslog	PLIM EIO training errors syslog	PLIM EIO training errors syslog		N	IManagedElement	F	F	F	0	T	maj	false	T	F
PLIM Checkpoint Initialization Failure syslog	PLIM check point failure syslog	PLIM check point failure syslog		N	IManagedElement	F	F	F	0	T	min	false	T	F
PLIM ASIC error syslog	PLIM asic error syslog	PLIM asic error syslog		N	IManagedElement	F	F	F	0	T	min	false	T	F
PLIM memory error syslog	PLIM memory error syslog	PLIM memory error syslog		N	IManagedElement	F	F	F	0	T	maj	false	T	F
PLIM squid error syslog	PLIM squid error syslog	PLIM squid error syslog		N	IManagedElement	F	F	F	0	T	min	false	T	F
PLIM 7 error syslog	PLIm 7b error syslog	PLIm 7b error syslog		N	IManagedElement	F	F	F	0	T	min	false	T	F
PLIM OC768 critical error syslog	PLIM OC768 critical error syslog	PLIM OC768 critical error syslog		N	IManagedElement	F	F	F	0	T	maj	false	T	F
PLIM OC768 INFO syslog	PLIM OC768 INFO syslog	PLIM OC768 INFO syslog		N	IManagedElement	F	F	F	0	T	info	false	T	F
PLIM OC768 debug syslog	PLIM OC768 debug syslog	PLIM OC768 debug syslog		N	IManagedElement	F	F	F	0	T	info	false	T	F
BGP notification syslog	bgp notification syslog	bgp notification syslog		N	IPhysicalLayer	T	T	F	0	F	info	F	T	F
BGP notification syslog	bgp notification syslog	bgp notification syslog		N	IPhysicalLayer	T	T	F	0	F	info	F	T	F