Cisco logging

Fact:
0. Logging message are error messages of software or hardware.
1. Internal buffer logging mechanism enabled by default.
2. Syslog isn't enabled by default
3. Before configure logging, configure router is correct date, time and timezone.
4. To configure syslog, you must configure syslog-client within the router or built-in client.
5. Informational level displays reload request and low level stack process
6. Debug level displays
7. Notice level displays interface up or down transitions and system restart message


Facility = location

Recipes:
1. Enable syslog
Router#configure terminal
Router(config)#logging buffered informational

2. Set logging target remote log
Router#configure terminal
Router(config)# logging 172.25.1.1
Router(config)# end
Router#

3.  Changing the default log facility
Router#configure terminal
Router(config)# logging host 172.25.1.1
Router(config)# logging facility local6
Router(config)# end
Router#
By default, router will forward all syslog messages to the server's local7 log facility.

4. Restricting what log messages sent
Router# configure terminal
Router(config)# logging host 172.25.1.1
Router(config)# logging trap notifications
Router(config)# end

5. Rate limiting number of packets sent to syslog traffic
Router# configure terminal
Router(config)# logging host 172.25.1.1
Router(config)# logging rate-limit 30 except warning
Router(config)# end
Router#