Saving Log Files to a Syslog Server - NCOS-How-to-save-log-files/Saving-Log-Files-to-a-Syslog-Server

Saving and Managing Ericsson Cradlepoint Router Log Files
NetCloud Feature
Monitoring and Diagnostics > Alerts and Logs
ft:locale
en-US
ft:sourceName
Paligo_Prod

You can set up an Ericsson Cradlepoint router to send event-based information to a syslog server. Syslog servers act as a central repository for logging router events from multiple routers.

Note

Logs in Ericsson Cradlepoint routers are cleared on every power cycle or reboot. To save logs after a reboot, set up a connection from the router to the syslog server.

  1. Log into NetCloud Manager.

  2. Select Devices in the left-side navigation panel.

  3. Select the desired router.

  4. Select the Remote Connect menu and then select Device UI.

  5. Select Open Device UI.

  6. Log in to the device from the LOGIN screen. The default username is "admin". Default passwords are supplied with routers.

  7. Navigate to SYSTEM > Administration > System Logging.

  8. Select a logging level. The following logging level choices are available:

    • Debug – Includes all debug information for all debug levels from all device systems. This will limit the performance of the device and should only be enabled when explicit instructed to by an Ericsson Cradlepoint support engineer.

    • Info – Information about the system.

    • Warning – Something out of the ordinary has been identified with a system operation or service. The device will not take any action and continue operation as normal.

    • Error – An issue has been identified with a system operation or service that the device cannot repair and may cause poor performance.

    • Critical – A system operation or service is not functioning properly. This could cause the device to reboot.

  9. Select Enable Logging to a Syslog Server to send log messages to a specified syslog server.

  10. (Optional) Select Secure Syslog Binding: Use this option to enable sending the syslog over a bound IPsec tunnel so that the syslog is encrypted in transit. Before enabling this feature, you must complete the following:

    1. Configure an IPsec tunnel. See Configuring an IPsec VPN Tunnel.

    2. Configure a LAN binding for the syslog to tunnel. See Configuring a LAN Network Binding in NetCloud Router Services.

    3. Navigate back to SYSTEM > Administration > System Logging.

  11. In the Syslog Server Address field, enter the hostname or IP address of the syslog server.

  12. The remaining settings are optional:

    • Syslog Server Port – The number of the port on the syslog server that receives the log messages. The default port setting is 514 (UDP).

      Note

      UPD is a stateless messaging protocol that does not confirm message reception by the server.

    • Include System ID – This option will include the router's System ID at the beginning of every log message. This is often useful when a single, remote syslog server is handling logs for several routers.

    • Include Timestamp – Select this option to begin message text with a time stamp in YYYYmmddTHHMMSS[.sss]+|-NNNN format. Without this option, the message sent to a syslog server does not include any time stamp, relying on the receiving server to time stamp each log entry on receipt.

      Note

      This time stamp, including the time zone offset, may be incorrect until the router receives an NTP time update.

    • Include UTF8 Byte Order Mark – The log message is sent using a UTF-8 encoding. By default, the router will prepend the Unicode Byte Order Mark (BOM) to the syslog message in compliance with the syslog protocol RFC 5424. Some syslog servers may not fully support RFC 5424 and will treat the BOM as ASCII text, which will appear as garbled characters in the log. If garbled characters appear in log entries, disable this option.

    • Include RFC-3164 HEADER – This option will include the RFC 3164-compliant HEADER in each syslog message. For greatest RFC 3164 compliance, deselect other optional log fields. Without this option, the message sent to a syslog server includes the <PRI> field specified by RFC 3164 but does not include the HEADER (composed of TIMESTAMP and HOSTNAME).

      Note

      The TIMESTAMP format is Mmm dd hh:mm:ss in local time, without year or time zone. This time stamp, including the time zone offset, may be incorrect until the router receives an NTP time update.

    • Log to attached USB stick – Only enable this option if instructed by an Ericsson Cradlepoint support engineer. This will write a verbose log file to the root level of an attached USB device. Disable the feature before removing the USB device, or some logging data might be lost.

    • Verbose modem logging – Only enable this option if instructed by an Ericsson Cradlepoint support engineer.

  13. Click Save.