HP StorageWorks 8/80 Brocade Error Message Reference Guide v6.1.0 (53-1000600- - Page 55

Overview of System Messages 1 Fabric OS v6.1.0 generates the following component-specific Audit messages: • Authentication messages: AUTH 2001-3008 • Configuration messages: CONF-1000, 1020, 1022 • HTTP configuration messages: HTTP-1002 - 1003 • SNMP-related messages: SNMP-1004 - 1006 • Security-related messages (SFOS, RADIUS, login/logout, passwords, ACLs): SEC-3001 - 3038 • Software upgrade library: SULB-1001 - 1003, 1009 - 1010, 1017 -1018, 1020 - 1021, 1023 - 1024, 1026, 1030 - 1031, 1033 - 1035 • Zoning messages: ZONE-3001 - 3025 Event auditing is a configurable feature, set to off by default. You must enable event auditing by configuring the syslog daemon to send the events to a configured remote host using the syslogIpAdd command. You can set up filters to screen out particular classes of events using the auditCfg command (the classes include zone, security, configuration, firmware, and fabric). The defined set of Audit messages are sent to the configured remote host in the Audit message format, so that they are easily distinguishable from other syslog events that might occur in the network. For details on how to configure event auditing, see "Viewing and Configuring System Message Logs" on page 4. System Logging Daemon (syslogd) The system logging daemon (syslogd) is a process on UNIX, Linux, and some Windows systems that reads and logs messages as specified by the system administrator. Fabric OS can be configured to use a UNIX-style syslogd process to forward system events and error messages to log files on a remote host system. The host system can be running UNIX, Linux, or any other operating system that supports the standard syslogd functionality. Configuring for syslogd involves configuring the host, enabling syslogd on the Brocade model, and, optionally, setting the facility level. For the Brocade DCX, 24000 and 48000, each CP has a unique error log, depending on which CP was active when that message was reported. To fully understand message logging on the Brocade 24000 and 48000 you should enable the system logging daemon, because the logs on the host computer are maintained in a single merged file for both CPs and are in sequential order. Otherwise, you must examine the error logs in both CPs, particularly for events such as firmwareDownload or haFailover, for which the active CP changes. For the Brocade DCX, 24000 and 48000, any security violations that occur through Telnet, HTTP, or serial connections are not propagated between CPs. Security violations on the active CP are not propagated to the standby CP counters in the event of a failover, nor do security violations on the standby CP get propagated to the active CP counters. For information on configuring syslogd functionality, refer to the Fabric OS Administrator's Guide. System Console The system console displays messages only through the serial port. If you log in to a switch through the Ethernet port or modem port, you will not receive system console messages. Fabric OS Message Reference 3 53-1000600-02