Syslog Explained | Cisco CCNA 200-301

Join the Discord Server!
/ discord
---------------------
MY FULL CCNA COURSE
📹 CCNA - certbros.teach...
FREE CCNA FLASHCARDS
🃏 CCNA Flashcards - certbros.com/c...
HOW TO PASS THE CCNA
📚 Get a great book - amzn.to/3f16QA5
📹 Take a video course - certbros.teach...
✔ Use practice exams - www.certbros.c...
SOCIAL
🐦 Twitter - / certbros
📸 Instagram - / certbros
👔 LinkedIn - / certbros
💬 Discord - www.certbros.c...
Disclaimer: These are affiliate links. If you purchase using these links, I'll receive a small commission at no extra charge to you.
---------------------------------------------------------------------------------------------------------------
Using a SYSLOG server allows us to centrally manage our log information. Why would you want to do that? Well, there are a few reasons why.
First, Syslog information is very important when troubleshooting problems. Let's say a user reports a network outage. You can go through all of the logs to see if there were any problems at the time the user reported the issue.
Another benefit of storing syslog information in a central place is data retention. Cisco devises, by default, stores log information in RAM. This means, when the device reboots, the logs are erased. Keeping all of your log information in one place allows for easy archiving.
OK, so now we know what a syslog server is and why we use them, let's look at some log messages! It may not seem like it straight away, but these messages follow an industry standard. This makes it easy to correlate logs from different vendors.
- The first part is the timestamp or sequence number. You can choose which one you want to use.
- The next part is called the facility. This shows the source of the message.
- Next, we have the severity. This shows how urgent the log message is.
- Then we have something call the mnemonic, this is a code to identify the message.
- And finally, we have the description, which contains the log message.
Syslog has 8 severity levels ranging from 0-7. The top is the most urgent, severity 0, and the bottom is the least urgent, which is 7 for debug messages. This is important because you likely don’t want to send all syslog messages to your server.
0 Emergency
1 Alert
2 Critical
3 Error
4 Warning
5 Notice
6 Informational
7 Debug
Unfortunately, this is one of those tables you're going to have to memorise for the CCNA exam. You need to know, not only the severity levels but which order they’re in. As with most of these things, mnemonics come to the rescue.
Every Awesome Cisco Engineer Will Need Ice-cream Daily
Ernie Always Cries Even when No one is Dying
#ccna #cisco #networking

[@Lashan_]

"good ole 2020" I love your vids, the quality is perfection but I especially appreciate that your personality can be found in each! Thanks for being a genuine teacher

[@Certbros]

Haha! Thank you! Really appreciate the comment. Great to hear you enjoy my terrible humour 👌

[@ardentdfender4116]

Very awesome how you covered this topic. I find the Severity List easier to remember with the ‘Every Awesome Cisco Engineer…..’ wording. That’s easier for me to remember. As well, really appreciate you showing how to capture Syslog info in a free 3rd party tool. I had no idea of that. But the fact that you showed how’s that’s even done was also immensely helpful as it relates to the topic itself.

[@liamtingle2762]

I love the concise nature of the Certbros videos.

[@thoughtsonafricaissuesanal1056]

This breaks it down and a beginner can follow without problems. Awesome explanation

[@sorrybabyx]

thanks bro this thing was eating my head lol. Also thanks for the mnemonic!

[@themistoclesnelson2163]

I love the question mark!

[@cesarausan]

One more time: Every Awesome Cisco Engineer Will Need Ice Cream Daily -> Emergency, Alert, Critical, Error, Warning, Notice, Information, Debug.

[@bySimurg]

Thanks bro. This is a AWESOME cource

[@ashutoshjha9147]

This was so helpful and easy to understand.

[@briancipriano2790]

Thank you for the video...It contained the right amount of information and was presented in a clear manner.

[@Certbros]

Thanks Brian! Really appreciate it 👍

[@pretender440]

Just what I'm looking for ! What a great explanation and demo 👍

[@Certbros]

Great to hear! Glad it was helpful.

[@ascvb3]

Excellent, high production-value explanation. Thanks.

[@SULAIMANBOCKRIE]

I really likes your tutorials and it has helped me a lot on my CCNA course.❤❤

[@kimurayasaki6588]

keep it up, you did a good job. it is simple and clearly to understand about syslog.

[@Certbros]

Thank you Kimura! Glad you liked it!

[@aRandomUserName321]

Thank you for all this great content

[@NathanLewis100]

Great Channel. Just subscribed

[@Certbros]

Thanks Nathan. Welcome to the channel!

[@olehzaiats2550]

Thanks for the explanation! Well done!

[@leothalion3983]

Keep them coming!!!

[@Certbros]

Thanks Jose! Will do 👍

[@seanduncan9722]

Fantastic. Gonna enjoy this channel.

[@Certbros]

Thanks Sean! Welcome to the channel 👍

[@tg9460]

Awesome tutorial. Thank you.

[@Certbros]

Thank you!

[@nikolatrpevski5989]

Great explanation!

[@Certbros]

Thanks Nikola!

[@aruizsilva]

Great content as usual :)

[@Certbros]

Much appreciated!

[@Rishavchhetri]

Everybody Always Complains Even When Nothing Is Different

[@sanawaqas898]

This helped me sooo much

[@Certbros]

Great to hear Sana!

[@charlytechinc]

Thank you!

[@Certbros]

You're welcome!

[@javierquesadadiaz7852]

Awesome channel thanks

[@Certbros]

Thank you Javier! It's really great to hear you like the channel. I have lots more videos plan for the near future.

[@nullsemicolon]

Great video!

[@Certbros]

Thanks!

[@jasonsims7642]

please make a video telling the difference between syslog and SEIM!

[@Certbros]

Thanks Jason. Great idea! I'll add SEIMs to my list of suggested videos.

[@badrhani6390]

it would be great if you could please update the video of the NAT from 2016 with more explanation skills , Thank you for your effort !

[@Certbros]

Thanks for the suggestion Badr! RUclips doesn't make it easy to update videos without loosing the search rankings but I will need to update it at some point 👍

[@victorgarcia3000]

Very clear

[@idakhoshvaght6019]

This is a genuine high-quality education. Truly enjoyed it. Thank you so much. I wish you do more prep video certificates such as EMC certificates for storage. Never find any good videos about it on the internet.

[@Certbros]

Thanks for the comment! Really glad you liked the video! No plans for that but if enough people request I'd be happy to take a look. 👍

[@milesdyson5211]

It's R *OUT* ER *OUT*
NOT ROOT-A

[@Certbros]

Nope. It’s rooter 😆

[@sirusvirtus5885]

explain, how deploy stack, (ring or circle)on real hardware, . how to connect Huawei and other. Let's start with 5 units

[@ramshi_d]

Helpful 🙂

[@rakeshbare8478]

Please tell me..how can I create new field in existing log in syslog-ng?

[@tahersadeghi6773]

Did you say Auth or All?

[@dasguptapratip]

Loved your explanation. I was able to configure my own syslog server post this video.

[@infomoreandmore]

is david bombal the instructor?

[@Certbros]

He wishes! 🤣

[@mdawadud3520]

Very nice

[@Sphoe08]

Thanks a lot for this video! I really enjoyed it and it was very useful!

[@Certbros]

No problem! Great to hear it helped.

[@MariaGomez-lg2ug]

Then heart the routers have a syslog server by default because when we configure something the router shows it the same way the switch????

[@hacker_0740]

Very very salubrious tutorial I find it.

[@Certbros]

Thank you!

[@dougmmm]

Great explanation, loved it. This is superbly instructed. Well done.

[@badrhani6390]

very nice explanation, thank you for your effort!

[@Certbros]

You're very welcome!

[@the77th]

EVERY ALERT CISCO ENGINEER WOULD NOTICE INCORRECT DATA

[@johnhack67]

Thanks

[@Certbros]

You're welcome

[@Yasar4ever]

Thank You