Syslog Messages
The tables below list the syslog messages generated by Cisco vEdge devices and Cisco IOS XE Catalyst SD-WAN devices. The messages are grouped based on the software module that generates them. The software modules are typically processes (daemons) that run on the device.
All syslog messages are generated on all the devices unless otherwise indicated.
Each syslog message has a corresponding number. The tables list all syslog messages and their number even if the messages are defined in the header files but are not currently used in the operating software. For these messages, the Message Format, Description, and Action fields are empty.
In these tables, the Action field indicates the recommended action you should take in response to the syslog message:
-
A—Automatically open a ticket in your organization's support team.
-
AE—Automatically open a support ticket and escalate the ticket
-
E—Send email to the appropriate team within your organization.
If you see a syslog message that is not listed in one of the tables below, please send the message, along with the device and software version, to Cisco support.
Note |
For information about Cisco SD-WAN Manager syslog message format, syslog message levels, and system log files, see Syslog Messages. |
CFGMGR: Configuration Manager Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CFGMGR_SYSLOG_END |
399999 |
Terminating cfgmgr |
Configuration manager is stopping |
E |
CFGMGR_SYSLOG_SPEED_DUPLEX_NOT_SUPPORTED |
300003 |
— |
Interface does not support duplex mode |
E |
CFGMGR_SYSLOG_SPURIOUS_TIMER |
300002 |
— |
Internal error |
A |
CFGMGR_SYSLOG_IF_STATE |
300004 |
— |
Interface state reported by configuration manager |
E |
CFGMGR_SYSLOG_START |
300001 |
Starting cfgmgr |
Configuration manager is starting |
E |
CFLOWD: Cflowd Traffic Flow Monitoring Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CFLOWD_SYSLOG_MSG |
2200002 |
Received information about vpn_id %ld, vpn_id |
Cflowd detected a VPN change |
E |
Priority: Notice
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CFLOWD_SYSLOG_END |
2299999 |
Terminating module cflowd because sysmgr terminated |
Cflowd module going down at request of sysmgr |
E |
CFLOWD_SYSLOG_END |
2299999 |
Terminating module cflowd with error code %d |
Cflowd initialization failed and cflowd is about to go down, or cflowd module is going down |
A |
CFLOWD_SYSLOG_START |
2200001 |
Starting module cflowd |
Cflowd module is starting |
E |
CHMGR: Chassis Manager
The chassis manager process runs only on physical routers.
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CHMGR_CHASSIS_INFO |
100009 |
Chassis-Type %s max-modules %d |
Informational message indicating chassis type and maximum number of modules (PIMs + fixed) supported by chassis |
E |
CHMGR_FAN_SPEED_HIGH |
100003 |
— |
Fan speed is high |
E |
CHMGR_FAN_SPEED_NORMAL |
100004 |
— |
Fan speed is normal |
E |
CHMGR_FANTRAY_INSERTED |
100052 |
Fantray %d inserted |
Fan tray inserted (on vEdge 2000 only) |
E |
CHMGR_FANTRAY_REMOVED |
100053 |
Fantray %d removed |
Fan tray removed (on vEdge 2000 only) |
E |
CHMGR_MODULE_INSERTED |
100007 |
Module %d inserted - port type: %s, num_ports: %s |
PIM module inserted |
E |
CHMGR_MODULE_REMOVED |
100008 |
Module %d removed |
PIM module removed |
E |
CHMGR_PIM_OK |
100057 |
— |
PIM module status is normal |
E |
CHMGR_PORT_INSERTED |
100005 |
Port %s inserted in module %d |
SFP inserted |
E |
CHMGR_PORT_REMOVED |
100006 |
Port %s removed from module %d |
SFP removed |
E |
CHMGR_SIGTERM |
100024 |
Received sigterm, exiting gracefully |
Debug-level message indicating that chassis manager is going down |
E |
CHMGR_SYSLOG_START |
100001 |
Starting chassis manager |
Chassis manager process is starting |
E |
CHMGR_USB_INSERTED |
100058 |
USB media inserted in slot %d |
USB media inserted |
E |
CHMGR_USB_REMOVED |
100059 |
USB media removed from slot %d |
USB media removed |
E |
Priority: Notice
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CHMGR_EMMC_OK |
100039 |
eMMC read successful |
EMMC read was successful |
E |
CHMGR_FAN_OK |
100041 |
Fan Tray %d Fan %d fault cleared, ftrayid, id |
Fan fault cleared |
E |
CHMGR_FANTRAY_OPER |
100055 |
Fan tray '%d' up, ftrayid |
Fan tray detected |
A |
CHMGR_FLASH_OK |
100037 |
Flash memory status read successful |
Flash read successful |
E |
CHMGR_PEM_OK |
100043 |
Power supply '%d' fault cleared |
Power supply fault cleared |
E |
CHMGR_PEM_OPER |
100045 |
Power supply '%d' up |
Power supply inserted or detected |
E |
CHMGR_SDCARD_OK |
100047 |
SD card read successful |
SD card read successful |
E |
CHMGR_SFP_UNSUPPORTED |
10060 |
SFP %s is not supported |
SFP is not supported |
E |
CHMGR_SHORT_RESET_REQUEST |
100018 |
— |
Chassis manager received a request to reboot the router |
E |
CHMGR_TEMP_GREEN |
100030 |
%s temperature (%d degrees C) is below yellow threshold (%d degrees C) |
Temperature sensor reading below yellow threshold |
E |
CHMGR_TEMP_OK |
100027 |
%s temperature sensor fault cleared |
Temperature sensor read successful after a previous failed attempt |
E |
Priority: Warning
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CHMGR_HOTSWAP_DIFF_MOD |
100051 |
Hot-Insertion of a module of different type requires reboot. Module %d will remain down, |
PIM module of a different type was inserted in the slot; it was detected, but will remain down until the next reboot |
E |
Priority: Error
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CHMGR_CONFD_DATACB_REGISTER_FAILED |
100023 |
Failed to register data cb |
Internal error registering a data callback function with confd |
AE |
CHMGR_CONFD_REPLY_FAILED |
100022 |
Failed to send oper data reply - %s (%d) |
Internal error occurred when processing chassis manager–related configuration of show command |
A |
CHMGR_EEPROM_READ_FAILED |
100011 |
Failed to read module %d eeprom on chassis %s, module, chassis-name |
Failed to read details of inserted PIM |
AE |
CHMGR_EEPROM_VERSION_ERROR |
100012 |
Unsupported eeprom format version for module %d |
EEPROM version of PIM module is supported; module will not be recognized |
AE |
CHMGR_EMMC_FAULT |
100038 |
eMMC fault detected |
Error occurred reading EMMC information |
A |
CHMGR_FAN_FAULT |
100040 |
Fan Tray %d Fan %d fault detected, ftrayid, id |
Fan fault detected |
A |
CHMGR_FANTRAY_DOWN |
100054 |
Fan tray '%d' not present, ftrayid id |
Fan tray not detected |
A |
CHMGR_FLASH_FAULT |
100036 |
Flash memory status fault |
Internal error reading flash |
AE |
CHMGR_GET_HWADDR_FAILED |
100010 |
Failed to get macaddr for %s, p_ifname |
Internal error resulting from failure to obtain an interface's MAC address |
A |
CHMGR_GET_IFFLAG_FAILED |
100016 |
Failed to get ifflags for %s err %d, p_port->kernel_name, errno |
Interface initialization failure; interface may remain down, or device may reboot |
A |
CHMGR_IFFLAGS_SET_FAIL |
100050 |
— |
Setting an interface flag failed |
E |
CHMGR_IF_GSO_OFF_FAILED |
100025 |
— |
Setting interface options failed |
E |
CHMGR_PEM_DOWN |
100044 |
Power supply '%d' down or not present |
Power supply removed or not detected |
A |
CHMGR_PEM_FAULT |
100042 |
Power supply '%d' fault detected |
Power supply fault detected |
AE |
CHMGR_PIM_FAULT |
100056 |
PIM %d power fault |
PIM power fault detected |
AE |
CHMGR_PIM_FAULT |
100056 |
PIM %d power fault cleared |
PIM power fault cleared |
A |
CHMGR_SDCARD_FAULT |
100046 |
SD card fault detected (no present or unreadable) |
SD card fault detected |
A |
CHMGR_SET_IFFLAG_FAILED |
100017 |
Failed to set ifflags to %x for %s err %d |
Interface initialization failure; interface may remain down, or device may reboot |
A |
CHMGR_SHORT_RESET_CLEAR_FAILED |
100019 |
— |
Clearing a reboot request failed. |
A |
CHMGR_SHORT_RESET_FAILED |
100020 |
— |
Request to reset the router by rebooting failed |
A |
CHMGR_SPURIOUS_TIMER |
100035 |
Spurious timer ignored what = %#x arg = %p |
Internal error |
A |
CHMGR_SYSOUT_OF_RESOURCES |
100049 |
Timer add failed. Out of resources |
Interal error; if fatal, device may reboot to recover |
A |
CHMGR_UNKNOWN_MODULE_TYPE |
100013 |
Invalid module-type %x in module-slot %d on chassis %s, |
Unrecognized PIM module type in slot |
AE |
CHMGR_UNSUPPORTED_MODULE_TYPE |
100014 |
Module-Type %s not supported in slot %d on chassis %s |
PIM module is not supported in slot in which it is inserted |
A |
Priority: Critical
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CHMGR_IF_RENAME_FAILED |
100015 |
Unable to rename %s to %s |
Interface initialization failed; interface may remain down or the device may reboot |
A |
CHMGR_TEMP_FAULT |
100026 |
%s temperature sensor fault detected. Unable to read temperature |
Failed to read from a temperature sensor; possible temperature sensor failure |
A |
CHMGR_TEMP_RED |
100028 |
%s temperature (%d degrees C) is above red threshold (%d degrees C). |
Temperature sensor reading above red threshold |
AE |
CHMGR_TEMP_YELLOW |
100029 |
%s temperature (%d degrees C) is above yellow threshold (%d degrees C), |
Temperature sensor reading above yellow threshold |
A |
Priority: Alert
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CHMGR_CONFD_INIT_FAILED |
100021 |
Initialization failed. vconfd_module_init returned %d |
Chassis manager failed to initialize and start |
AE |
CVMX: Internal Cavium Driver Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CVMX_SYSLOG_END |
999999 |
Terminating Cavium drivers |
Internal Cavium drivers ending |
E |
CVMX_SYSLOG_START |
900001 |
Starting Cavium drivers |
Internal Cavium drivers starting |
E |
CXP: Cloud onRamp for SaaS Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CXP_SYSLOG_END |
2799999 |
Terminating Cloud onRamp process |
Cloud onRamp for SaaS ending |
E |
CXP_SYSLOG_START |
2700001 |
Starting Cloud onRamp process |
Cloud onRamp for SaaS starting |
E |
CONTAINER: Containers
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
CONTAINER_SYSLOG_END |
2699999 |
Terminating container process |
Container process ending |
E |
CONTAINER_SYSLOG_START |
2600001 |
Starting container process |
Container process starting |
E |
DBGD: Debug Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
DBGD_SYSLOG_END |
2900001 |
Terminating debug process |
Debug process ending |
E |
DBGD_SYSLOG_START |
2999999 |
Starting debug process |
Debug process starting |
E |
DHCPC: DHCP Client
The DHCP client process runs only on Cisco vEdge devices.
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
DHCP_SYSLOG_CLEAR_INTERFACE |
1300006 |
Clearing dhcp state for interface %s, |
DHCP client cleared DHCP state for interface |
E |
DHCP_SYSLOG_DISCOVER_TIMEOUT |
1300005 |
No response for dhcp discover packets for interface %s, |
DHCP discovery failure |
E |
DHCP_SYSLOG_END |
1300001 |
Terminating syslog process |
Syslog process ending |
E |
DHCP_SYSLOG_IP_ADDR_ASSIGNED |
1300002 |
Assigned address %s to interface %s |
DHCP client assigned address to interface |
E |
DHCP_SYSLOG_IP_ADDR_RELEASED |
1300003 |
Released address for interface %s |
DHCP client released address |
E |
DHCP_SYSLOG_IP_ADDR_RENEWED |
1300010 |
Renewed address %s for interface %s |
DHCP client address renewed |
E |
DHCP_SYSLOG_IP_ADDR_REQUEST_RENEW |
1300004 |
Requesting renew [50%%] for interface %s address %s/%d |
DHCP client renewal request at 50% of lease expiration time |
E |
DHCP_SYSLOG_IP_ADDR_REQUEST_RENEW |
1300004 |
Requesting renew [85%%] for interface %s address %s/%d |
DHCP client renewal request at 85% of lease expiration time |
E |
DHCP_SYSLOG_IP_ADDR_REQUEST_RENEW |
1300004 |
Requesting renew [100%%] for interface %s address %s/%d |
DHCP client renewal request at 100% of lease expiration time |
E |
DHCP_SYSLOG_START |
1399999 |
Starting syslog process |
Syslog paroces starting |
E |
Priority: Critical
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
DHCP_SYSLOG_IP_ADDR_CONFLICT |
1300007 |
Interface %s IP Address %s conflict with interface %s, |
DHCP client detected IP address conflict with another interface |
E |
DHCP: DHCP Server
The DHCP server process runs only on Cisco vEdge devices.
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
DHCP_SYSLOG_CLEAR_SERVER_BINDINGS |
1300008 |
Clearing dhcp server bindings for interface %s, vpn %ld, |
DHCP server cleared bindings for interface |
E |
DHCP_SYSLOG_CLEAR_SERVER_BINDINGS |
1300008 |
Clearing dhcp server binding for interface %s, vpn %ld, mac addr %x:%x:%x:%x:%x:%x, |
DHCP server cleared bindings for interface |
E |
FPMD: Forwarding Policy Manager Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
FPMD_SYSLOG_ACL_PROGRAM_SUCCESS |
1100005 |
Successfully reprogrammed access list - %s |
Access list successfully created |
E |
FPMD_SYSLOG_END |
1199999 |
Terminating fpmd |
Forwarding policy manager process is ending |
E |
FPMD_SYSLOG_POLICY_PROGRAM_SUCCESS |
1100004 |
Successfully reprogrammed policy %s - %s |
Policy created successfully |
E |
FPMD_SYSLOG_START |
1100001 |
Starting fpmd |
Forwarding policy manager process is starting |
E |
Priority: Alert
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
FPMD_SYSLOG_ACL_PROGRAM_FAILED |
1100003 |
Failed to allocate memory for access list %s. Continuing without the access |
Access list could not be created |
A |
FPMD_SYSLOG_POLICY_PROGRAM_FAILED |
1100002 |
Failed to allocate memory for policy %s - %s. Continuing without the policy |
Policy could not be created |
A |
FTMD: Forwarding Table Management Process
The forwarding table management process runs only on Cisco vEdge devices.
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
||
---|---|---|---|---|---|---|
FTMD_SLA_CLASS_ADD |
1000020 |
SLA Class %s added at index %d: loss = %d%%, latency = %d ms |
SLA class added |
E |
||
FTMD_SYSLOG_BFD_STATE |
1000009 |
record with discriminator %u invalid |
BFD state is invalid |
E |
||
FTMD_SYSLOG_BFD_STATE |
1000009 |
BFD Session %s.%u->%s.%u %s:%u->%s:%u %s %s %s %d |
BFD state changed |
E |
||
FTMD_SYSLOG_DBGD_STATE |
1000036 |
Connection to DBGD came up Connection to DBGD went down DBGD FTM: Initialized message queue DBGD FTM oper %d vpn %u sip %s:%u dip %s %u DBGD FTM: oper %d vpn %lu localc %d remote %d remoteip %s |
Messages related to the FTM debugging process |
E |
||
FTMD_SYSLOG_DPI_FLOW_OOM |
1000024 |
Out-of-memory status for DPI flows: %s |
Memory status for SAIE flows
|
E |
||
FTMD_SYSLOG_DPI_WRITE_OFF |
1000032 |
Turning off writing DPI records to disk |
SAIE records are no longer being written to disk
|
E |
||
FTMD_SYSLOG_END |
1999999 |
Terminating FTM process |
Forwarding table management process ending |
E |
||
FTMD_SYSLOG_FIB_GROW |
1000012 |
Growing FIB6 memory to accommodate larger tables): |
IPv6 forwarding table size is being increased |
E |
||
FTMD_SYSLOG_FIB_GROW |
1000012 |
Growing FIB memory to accommodate larger tables): |
IPv4 forwarding table size is being increased |
E |
||
FTMD_SYSLOG_IF_STATE |
1000001 |
VPN %lu Interface %s %s, |
FTM detected interface state change |
E |
||
FTMD_SYSLOG_LR_ADD |
1000027 |
LR: Adding Iface %s as LR |
Last-resort interface is being added |
E |
||
FTMD_SYSLOG_LR_ADD |
1000027 |
LR: Iface %s has become an LR |
Interface has become a last-resort interface |
E |
||
FTMD_SYSLOG_LR_DEL |
1000028 |
LR: Found iface %s while looking for iface %s |
Last-resort interface found while looking for another interface |
E |
||
FTMD_SYSLOG_LR_DEL |
1000028 |
LR: iface %s has become non-LR. Hence set OPER UP on that interface |
Last-resort interface has become an active interface |
E |
||
FTMD_SYSLOG_LR_DEL |
1000028 |
LR: Iface %s has become a non-LR LR: Removing Iface %s as LR |
Messages related to an interface that is no longer a last-resort interface |
E |
||
FTMD_SYSLOG_LR_DOWN |
1000030 |
LR: At least one bfd session of non-LR is active LR: At least one non-LR's bfd session in Up LF bfd session = SIP: %s DIP:%s SPORT:%u DPORT:%u PROTO:%u is Up for at least &u interval msecs LR: Bringing LR's wan if Down in %u msecs LR: Bringing LR's wan if Down right away LR: Cleared LR down_in-progress |
Messages related to shutting down an interface of last resort |
E |
||
FTMD_SYSLOG_LR_UP |
1000029 |
LR: All bfd sessions gone down. Setting LR %s's OPER state to UP |
Last-resort interface's status set to Up because no other circuits on the router are active |
E |
||
FTMD_SYSLOG_LR_UP |
1000029 |
LR: Bring LR's wan if up immediately as no other circuit's bfd sessions are up |
Last-resort interface activated because no other circuits on the router are active |
E |
||
FTMD_SYSLOG_LR_UP |
1000029 |
LR: Starting hold up timer immediately !! |
Hold timer for last-resort interface activated because no other circuits on the router are active |
E |
||
FTMD_SYSLOG_NAT_FLOW_ADD |
1000039 |
NAT flow add: Private %s, Public %s |
FTM detected the addition of a NAT flow with the specified private and public IP addresses |
E |
||
FTMD_SYSLOG_NAT_FLOW_DELETE |
1000040 |
NAT flow delete: Private %s, Public %s |
FTM detected the deletion of a NAT flow with the specified private and public IP addresses |
E |
||
FTMD_SYSLOG_PIM_DOWN |
1000017 |
— |
FTM detected that PIM ended |
E |
||
FTMD_SYSLOG_PIM_UP |
1000018 |
— |
FTM detected that PIM started |
E |
||
FTMD_SYSLOG_ROUTE_ADD_FAIL |
1000004 |
Route Add for prefix %s Failed. Reason %s |
FTM failed to add a route received from the RTM |
E |
||
FTMD_SYSLOG_ROUTE_VERIFY |
1000033 |
Successfully verified RIB and FIB routes on the Cisco vEdge device |
FTM verified the routes in the router's RIB and FIB |
E |
||
FTMD_SYSLOG_ROUTE_VERIFY_FAIL |
1000034 |
— |
RIB and FIB router verification failed |
E |
||
FTMD_SYSLOG_SIGTERM |
1000005 |
Received Cleanup signal. Exiting gracefully |
FTM received termination signal from sysmgr and is about to go down |
E |
||
FTMD_SYSLOG_START |
1000001 |
Starting FTM process |
Forwarding table management process starting |
E |
||
FTMD_SYSLOG_TCPD_STATE |
1000035 |
Sent tcp_opt_disable successfully for vpn %ld |
Disabling of TCP options was successful on the interface |
E |
||
FTMD_SYSLOG_TUNNEL_ADD_FAIL |
1000015 |
Tunnel Add to TLOC %s.%s Failed. Reason %s |
Failed to add new TLOC; reported by TTM |
E |
||
FTMD_SYSLOG_WWAN_STATE |
1000025 |
Bring %s last resort circuit |
Up or down status of circuit of last resort |
E |
||
FTMD_SYSLOG_WWAN_STATE |
1000025 |
Connection to WWAN came up |
Circuit of last resort came up |
E |
||
FTMD_SYSLOG_WWAN_STATE |
1000025 |
Connection to WWAN went down |
Circuit of last resort went down |
E |
Priority: Notice
Message |
Number |
Message Format |
Description |
Action |
FTMD_SLA_CLASS_DEL |
1000022 |
Sla class %s at index %d removed: loss = %d%%, latency = %d ms, jitter = %d ms |
SLA class deleted |
A |
FTMD_SLA_CLASS_MOD |
1000021 |
Sla class %s at index %d modified: loss = %d%%, latency = %d ms, jitter = %d ms |
SLA class changed |
A |
FTMD_SLA_CLASS_VIOLATION |
1000023 |
[%lu] SLA class violation application %s %2:%u._%s:&u protocol: %d dscp: %d %s, status - %s |
SLA class violation for application in specified VPN, with specified source address and port, destination address and port, protocol, DSCP, and reason |
A |
FTMD_SYSLOG_DOT1X_HOST |
1000031 |
Host %s denied access on interface %s in single host mode |
An 802.1X interface in single-host mode is denying access, because it has already granted access to a client |
E |
FTMD_SYSLOG_FLOW_LOG |
1000026 |
%s |
FTM detected a new flow |
E |
FTMD_SYSLOG_FP_CORE_FAIL |
1000013 |
FP core watchdog expired (rc = %d). %s, rc, action_str |
FTM detected that FP may not be functioning; device will reboot soon |
A |
FTMD_SYSLOG_PMTU_LOWERED |
1000016 |
Tunnel %s/%d -> %s/%d MTU Changed to %u due to Path-MTU Discovery, |
MTU size on a tunnel changed due to path MTU discovery |
E |
FTMD_SYSLOG_ZBFW_FLOW_ADD |
1000037 |
ZBF flow created zone-air %s key %s src_vpn %d dst_vpn %d expiry secs %d state %s |
FTM detected the creation of a zone pair |
E |
FTMD_SYSLOG_ZBFW_FLOW_DEL |
1000038 |
ZBF flow deleted zone-air %s key %s src_vpn %d dst_vpn %d state %s |
FTM detected the deletion of a zone pair |
E |
Priority: Critical
Message |
Number |
Message Format |
Description |
Action |
||
FTMD_SYSLOG_BUFFER_POOL_LOW
|
1000041 |
Critical Alert: Buffer Pool <num>: available buffers are x% of total buffers |
FTM detected that the specified buffer pool has gone below 20% of its capacity |
E |
Priority: Warning
Message |
Number |
Message Format |
Description |
Action |
||
FTMD_SYSLOG_BUFFER_POOL_LOW
|
1000041 |
Warning Alert: Buffer Pool <num>: available buffers are x% of total buffers |
FTM detected that the specified buffer pool has gone below 50% of its capacity |
E |
||
FTMD_SYSLOG_TTM_DOWN |
1000008 |
Connection to TTM went down. p_msgq %p p_ftm %p, |
FTM connection with TTM went down; BFD sessions will be cleared |
E |
||
FTMD_SYSLOG_TTM_UP |
1000007 |
Connection to TTM came up. p_msgq %p p_ftm %p, |
FTM connected with TTM |
E |
||
FTMD_TUNNEL_SLA_CHANGED |
1000019 |
SLA changed for session: %s.%u->%s:%u->%s:%u. New loss = %d%%, latency = %d ms, jitter = %d ms, SLA Classes: %s (ox%x) %s%s |
FTM detected SLA changes on a tunnel |
E |
Priority: Error
Message |
Number |
Message Format |
Description |
Action |
FTMD_SYSLOG_CONFD_FAIL |
1000003 |
Failed to register bfd show data cb |
FTM failed to register data callback wtih confd; device may reboot |
AE |
FTMD_SYSLOG_CONFD_FAIL |
1000003 |
Failed to register policer show data cb |
FTM failed to register data callback with confd; device may reboot |
AE |
FTMD_SYSLOG_CONFD_FAIL |
1000003 |
%s: Failed to register data cb, __FUNCTION__ |
FTM failed to register data callback with confd; device may reboot |
AE |
FTMD_SYSLOG_CONFD_FAIL |
1000003 |
%s: Failed to send oper data reply - %s (%d) : %s, |
FTM failed to respond correctly to confd; some show commands may not work |
A |
FTMD_SYSLOG_FP_COREDUMP |
1000011 |
FP Core %d Died. Core file recorded at %s, |
FTM detected an FP crash; device will reboot soon |
AE |
FTMD_SYSLOG_IFADD_FAIL |
1000014 |
Failed to add interface %s in vpn %lu. Out of forwarding interface records |
Interface not added because of insufficient forwarding interface database records |
A |
FTMD_SYSLOG_IFADD_FAIL |
1000014 |
Failed to add interface %s in vpn %lu. Out of snmp interface indices |
Interface not added because of insufficient SNMP interface indices |
A |
FTMD_SYSLOG_INIT_FAIL |
1000002 |
vconf_module_init returned %d |
FTM failed to start with confd |
A |
FTMD_SYSLOG_LR_DEL |
1000028 |
LR: LR is not enabled...while we are trying to remove iface %s as last resort |
Interface being removed is not configured as a last-resort interface |
A |
FTMD_SYSLOG_LR_DEL |
1000028 |
LR: Unable to remove iface %s as LR |
Interface is no longer a last-resort interface so it cannot be deleted |
A |
FTMD_SYSLOG_RTM_DECODE_FAIL |
1000006 |
Bad RTM Msg: Msg-Type %u Msg-Len %u len: %u decoded-len %u, |
Could not process route or interface change message from RTM |
A |
FTMP_SYSLOG_SPURIOUS_TIMER |
1000010 |
Spurious timer ignored what = %#x arg = %p, |
Internal error |
A |
GPS: Global Positioning System
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
GPS_SYSLOG_END |
2599999 |
Terminating GPS |
GPS process is ending |
E |
GPS_SYSLOG_GGA_FIX |
2500002 |
GGA %d:%d:%d lat=%f lon=%f alt=%f sat=%d hdop %f fix%d |
GPS fix information |
E |
GPS_SYSLOG_GSA_FIX |
2500004 |
GSA %s pdop=%.2f hdop=%.2f vdop=%.2f |
GPS satellite and dilution of precision (DOP) information |
E |
GPS_SYSLOG_PSTOP |
2500005 |
Polling disabled Stopping polling timers |
Messages related to polling for GPS information |
E |
GPS_SYSLOG_RMC_FIX |
2500003 |
RMC %s %d %d lat=%f lon=%f speed %f course=%s status valid |
Essential minimum GPS information |
E |
GPS_SYSLOG_START |
2500001 |
Starting GPS |
GPS process is starting |
E |
IGMP: Internet Group Management Protocol
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
IGMP_SYSLOG_END |
1800001 |
Terminating IGMP |
IGMP process is ending |
E |
IGMP_SYSLOG_START |
1899999 |
Starting IGMP |
IGMP process is starting |
E |
LIBBSS: UNIX BSS Library
Unused Messages
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
LIBBSS_SYSLOG_END |
1699999 |
Terminating libbss |
UNIX BSS library process is ending |
E |
LIBBSS_SYSLOG_START |
1600001 |
Starting libbss |
UNIX BSS library process is starting |
E |
LIBCHMGR: Chassis Manager Library Process
Unused Messages
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
LIBCHMGR_SYSLOG_END |
1599999 |
Terminating libchmrg |
Chassis manager library process is ending |
E |
LIBCHMGR_SYSLOG_START |
1500001 |
Starting libchmgr |
Chassis manager libryary process is starting |
E |
MSGQ: Message Queue Process
Ununsed Messages
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
MSGQ_SYSLOG_END |
899999 |
Terminating msgq |
Message queue process is ending |
E |
MSGQ_SYSLOG_START |
800001 |
Starting msgq |
Message queue process is starting |
E |
OMP: Overlay Management Protocol
Priority: Informational or Other
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
OMP_NUMBER_OF_CISCO_VSMARTS |
400005 |
Number of Cisco vSmarts connected: %u |
Number of Cisco Catalyst SD-WAN Controllers to which device is connected (on Cisco vEdge devices only) |
E |
OMP_PEER_STATE_CHANGE |
400002 |
%s peer %s state changed to %s, |
OMP peer stated changed to up or down |
E |
OMP_POLICY_CHANGE |
400007 |
Using policy from peer %s, |
Forwarding policy received from Cisco Catalyst SD-WAN Controller (on Cisco vEdge devices only) |
E |
OMP_STATE_CHANGE |
400003 |
Operational state changed to %s, |
OMP internal operational state changed |
E |
OMP_TLOC_STATE_CHANGE |
400004 |
TLOC %s state changed to %s for address-family: %s, |
TLOC state changed |
E |
Priority: Notice
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
OMP_SYSLOG_END |
400006 |
Terminating |
OMP process is stopping |
E |
OMP_SYSLOG_START |
400001 |
Starting |
OMP process is starting |
E |
PIM: Protocol-Independent Multicast Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
IGMP_SYSLOG_END |
1900001 |
Terminating |
PIM process is ending |
E |
IGMP_SYSLOG_START |
1999999 |
Starting |
PIM process is starting |
E |
Priority: Notice
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
PIM_SYSLOG_IF_STATE_CHANGE |
1900003 |
VPN %lu Interface %s %s |
In specified VPN, interface state changed to up or down |
E |
PIM_SYSLOG_NBR_STATE_CHANGE |
1900002 |
Neighbor %s state changed to up |
PIM neighbor came up |
E |
PIM_SYSLOG_TUNNEL_STATE_CHANGE |
1900004 |
Tunnel %s state changed to %s |
Tunnel used for PIM when down or came up |
E |
Priority: Error
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
PIM_SYSLOG_NBR_STATE_CHANGE |
1900002 |
Neighbor %s stated changed to down |
PIM neighbor went down |
E |
POLICY: Policy Process
Unused Messages
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
POLICY_SYSLOG_END |
799999 |
Terminating policy |
Policy process is ending |
E |
POLICY_SYSLOG_START |
700001 |
Starting policy |
Policy process is starting |
E |
RESOLV: Resolver Process
Unused Messages
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
RESOLV_SYSLOG_END |
2000001 |
Terminating resolver |
Resolver process is ending |
E |
RESOLV_SYSLOG_START |
2099999 |
Starting resolver |
Resolver process is starting |
E |
SNMP Listener Process
Unused Messages
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
SNMP_SYSLOG_END |
2100001 |
Terminating SNMP listener |
SNMP listener process is ending |
E |
SNMP_SYSLOG_START |
2199999 |
Starting SNMP listener |
SNMP listener process is starting |
E |
SYSMGR: System Manager Process
The system manager process (daemon) spawns, monitors, and terminates all the processes in the system, and it collects and logs vital system information, such as memory and CPU status.
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
SYSMGR_CONFD_PHASE1_INFO |
200041 |
Generated authorized keys on %s, p_sysmgr->cfg.my_personality |
Generated authorized keys for SSH-based login between the Cisco SD-WAN Manager server and the Cisco SD-WAN device |
E |
SYSMGR_CONFD_PHASE2_SUCCESS |
200007 |
Confd Phase2 Up |
Successful device bringup |
E |
SYSMGR_DAEMON_START |
200017 |
Started daemon %s @ pid %d in vpn %lu, |
System manager started process in VPN |
E |
SYSMGR_DAEMON_UP |
200011 |
Daemon %s @ pid %d came up in vpn %lu (%d %d) |
Daemon started by system manager came up as expected |
E |
SYSMGR_SIGTERM |
200001 |
Received sigterm, stopping all daemons except confd |
System manager received termination signal and will initiate termination of all processes |
E |
SYSMGR_VPN_DESTROY |
200022 |
vpn %lu destroy. lookup returned %p |
Stopping all processes in VPN |
E |
Priority: Notice
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
SYSMGR_CLOCK_SET |
200025 |
System clock set to %s |
System clock set by user |
E |
SYSMGR_CONFD_CDB_NOT_INITED |
200031 |
Confd db initialization not complete. Deleting cdb and starting afresh. |
First-time initialization of configuration database |
E |
SYSMGR_CONFD_PHASE1_INFO |
200041 |
Install successfully completed from %s to %s |
Failed to read installation ID; will fall back to default |
E |
SYSMGR_CORE_FILE_COMPRESSED |
200045 |
— |
Core file was compressed |
E |
SYSMGR_DAEMON_EXIT_NORMAL |
200021 |
— |
A process terminated normally |
E |
SYSMGR_DAEMON_RESTARTED |
200043 |
— |
A process restarted |
E |
SYSMGR_DISK_ALERT_OFF |
200036 |
Disk usage is below 60%%. |
Disk usage is below threshold |
E |
SYSMGR_MEMORY_ALERT_OFF |
200058 |
System memory usage is below 50% |
System memory usage is below 50% |
E |
SYSMGR_MISC |
200065 |
— |
Miscellaneous message |
E |
SYSMGR_REBOOT |
200038 |
System going down for a reboot.. (%s), reason |
System manager initiating a device reboot, possibly because of a process failure |
E |
SYSMGR_SHM_FAIL |
200042 |
Created shared memory %s |
Successfully initialized shared memory for communication with other processes |
E |
SYSMGR_SHUTDOWN |
200040 |
System shutting down.. (%s), reason |
System manager is powering down the device; device will not come back up unless it is physically power-cycled |
A |
SYSMGR_SYSTEM_GREEN |
200050 |
System up with software version %s |
System status is green, indicating that all processes came up as expected |
E |
SYSMGR_SYSTEM_RED |
200051 |
System status red (software version '%s') |
System status is red, possibly because of a process failure |
A |
SYSMGR_SYSTEM_START |
200002 |
Starting system with Cisco SD-WAN software version %s |
System has stated; usually one of the first messages during device bringup |
E |
SYSMGR_TIMEZONE_SET |
200028 |
System timezone changed from %s to %s |
System timezone changed as result of configuration change |
E |
SYSMGR_UPGRADE_AUTO_CONFIRMED |
200063 |
— |
A software upgrade was automatically confirmed |
E |
SYSMGR_UPGRADE_NOT_CONFIRMED |
200049 |
— |
A software upgrade was as not confirmed |
E |
SYSMGR_UPGRADE_PENDING_CONFIRMATION |
200059 |
— |
A software upgrade is pending confirmation |
E |
SYSMGR_VDEBUG_LOG_CLEANUP_NEEDED |
200066 |
Debug logs exceed expected storage quota. Performing age-based cleanup to restore debug logging operations. |
Debug logs were deleted to create space |
A |
SYSMGR_DAEMON_TERMINATED |
200020 |
— |
A process terminated |
E |
SYSMGR_WATCHDOG_EXPIRED |
200062 |
— |
The watchdog process expired |
A |
Priority: Warning
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
SYSMGR_CORE_FILE_DELETED |
200044 |
— |
Core file was deleted |
A |
SYSMGR_DAEMON_RESTART_ABORTED |
200060 |
— |
The restarting of a process was terminated. |
A |
SYSMGR_DAEMON_STOP |
200018 |
Stopping daemon %s @ pid %d. Sending signal %d |
System manager stopped a daemon |
E |
SYSMGR_DISK_ALERT_ORANGE |
200054 |
Disk usage is above 75%%. Please clean up unnecessary files. |
Disk usage is above 75% |
E |
SYSMGR_DISK_ALERT_YELLOW |
200035 |
Disk usage is above 60%%. Please clean up unnecessary files. |
Disk usage is above 60% |
E |
SYSMGR_FILE_DELETED |
200064 |
Deleted file %s (size %lu MB) to recover disk space |
File deleted to free up disk space |
A |
SYSMGR_MEMORY_ALERT_ORANGE |
200056 |
System memory usage is above 75%% |
System memory usage is above 75% |
E |
SYSMGR_MEMORY_ALERT_YELLOW |
200057 |
System memory usage is above 60%% |
System memory usage is above 60% |
E |
Priority: Error
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
SYSMGR_BAUD_RATE_SET |
200046 |
Console baud rate changed to '%d', baud_rate |
Console baud rate changed |
E |
SYSMGR_BAUD_RATE_SET_FAIL |
200047 |
Failed to set console baud rate in OS to '%d' |
Failed to set user-specified console baud rate in Linus |
A |
SYSMGR_BAUD_RATE_SET_FAIL |
200047 |
Failed to set console baud rate in U-boot to '%d' |
Failed to set user-specified console baud rate in Uboot |
A |
SYSMGR_CLOCK_SET_FAIL |
200026 |
Cannot set system clock to %s |
Failed to set system clock to time specified by user |
A |
SYSMGR_CONFD_CDB_INIT_OPEN_FAIL |
200030 |
Failed to open cdb init file (%s) |
Failed to open the configuration database |
A |
SYSMGR_DAEMON_EXIT_FAIL |
200023 |
— |
A process could not terminate |
A |
SYSMGR_CONFD_DATACB_REGISTER_FAIL |
200010 |
Failed to register data cb |
Failed to register data callback function with confd; device may reboot |
A |
SYSMGR_CONFD_CDB_DEL_FAIL |
200032 |
Failed to remove cbd directory '%s' |
Failed to reinitialize configuration database to recover from failure |
AE |
SYSMGR_CONFD_FORK_FAILURE |
200003 |
Cannot move confd to phase2 (err %s) |
Failed to move confd to Phase 2; device will reboot soon |
A |
SYSMGR_CONFD_PHASE1_FAILURE |
200005 |
Failed to generate archive keys |
Failed to generate keys required for archiving configuration |
E |
SYSMGR_CONFD_PHASE1_FAILURE |
200005 |
Failed to generate authorized keys on %s, p_sysmgr->cfg.my_personality |
Failed to generate keys required for SSH-based login between the Cisco SD-WAN Manager server and the Cisco SD-WAN device |
E |
SYSMGR_CONFD_PHASE1_FAILURE |
200005 |
Failed to generate SSH keys for archive |
Failed to generate SSH keys |
E |
SYSMGR_CONFD_PHASE1_FAILURE |
200005 |
Failed to get install id from file, using 00_00 |
Failed to read previous system version |
A |
SYSMGR_CONFD_PHASE1_FAILURE |
200005 |
Failed to get previous version, using 0.0 |
Failed to read system version |
A |
SYSMGR_CONFD_PHASE1_FAILURE |
200005 |
Failed to transition confd to phase1. Re-initializing CDB.. |
Confd module failed to move to Phase 1, indicating a possible configuration database failure; device will reboot soon |
A |
SYSMGR_CONFD_PHASE1_FAILURE |
200005 |
Verified that archive keys exist |
Verified that configuration archive keys exist |
A |
SYSMGR_CONFD_PHASE2_FAILURE |
200006 |
Failed to get current version, using 0.0 |
Failed to read system version file |
A |
SYSMGR_CONFD_PHASE2_FAILURE |
200006 |
Failed to open %s, version_file |
Failed to open system version file |
A |
SYSMGR_CONFD_PHASE2_FAILURE |
200006 |
Failed to read %s, version_file |
Failed to read system version file |
A |
SYSMGR_CONFD_PHASE2_FAILURE |
200006 |
Failed to transition confd to phase2 |
Confd module failed to move to Phase 2, indicating a possible configuration database failure; device will reboot soon |
A |
SYSMGR_CONFD_REPLY_FAIL |
200009 |
Failed to send oper data reply - %s (%d) |
Failed to reply to confd; some show commands may not work |
A |
SYSMGR_CONFD_SETPGID_FAILURE |
200004 |
setpgid(0,0) failed: %d |
Process group failed to start |
A |
SYSMGR_DAEMON_DOWN |
200012 |
Daemon %s [%u] went down in vpn %lu, |
Process started by system manager went down |
A |
SYSMGR_DAEMON_EXECV_FAILURE |
200016 |
execv %s failed |
Internal failure occurred while starting a process |
A |
SYSMGR_DAEMON_FORK_FAILURE |
200014 |
Cannot start daemon %s: %s |
Internal failure occurred while starting a process |
A |
SYSMGR_DAEMON_INACTIVE |
200033 |
Daemon %s[%lu] @ pid %d died. Rebooting device.. |
System manager detected a process failure and is about to reboot the device |
A |
SYSMGR_DAEMON_MSGQ_FAILURE |
200013 |
Could not start msgq to daemon %s. err %d |
Failed to establish message queue with process; device may reboot soon |
A |
SYSMGR_DAEMON_MSGQ_FAILURE |
200013 |
Could not start msgq to quagga daemon %s. err %d |
Failed to establish message queue with routing process; device may reboot soon |
A |
SYSMGR_DAEMON_SETAFFINITY_FAILURE |
200061 |
— |
The scheduling of a process failed |
E |
SYSMGR_DAEMON_SETPGID_FAILURE |
200015 |
setpgid(0,0) failed |
Internal failure setting process group of a process |
A |
SYSMGR_DAEMON_STOPPED |
200019 |
Daemon %s @ pid %u terminated - %s |
Daemon started by system manager terminated; device may reboot soon (except for the Cisco Catalyst SD-WAN Validator) |
A |
SYSMGR_RTC_CLOCK_SET_FAIL |
200027 |
Cannot set hardware clock to %s - %s (errno |
Failed to update hardware clock to system time specified by user |
A |
SYSMGR_SHM_FAIL |
200042 |
Failed to close shared memory %s with an error %d |
Failed to completely and properly close the shared memory for communication with other processes |
E |
SYSMGR_SHM_FAIL |
200042 |
Failed to map shared memory %s |
Failed to initialize shared memory for communication with other processes |
E |
SYSMGR_SHM_FAIL |
200042 |
Failed to open shared memory %s with an error %d |
Failed to open shared memory for communication with other processes |
E |
SYSMGR_SHM_FAIL |
200042 |
Failed to truncate shared memory %s with an error %d |
Failed to initialize shared memory for communication with other processes |
E |
SYSMGR_SHM_FAIL |
200042 |
Failed to unmap shared memory %s |
Failed to completely and properly close shared memory for communication with other processes |
E |
SYSMGR_SWITCHBACK_FAILED |
200053 |
Software upgrade to version %s failed because of %s |
Software upgrade failed |
A |
SYSMGR_TIMEZONE_SET_FAIL |
200029 |
Failed to set system timezone to %s (rc = %d) |
Failed to set system timezone to timezone specified by user |
A |
SYSMGR_TRACE_ERROR |
200024 |
— |
A trace error occurred |
A |
Priority: Critical
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
SYSMGR_CONFD_INIT_FAIL |
200008 |
Sysmgr child in charge of migrating confd/ncs to phase2 exited with error code %d |
System manager detected a confd process failure; device may reboot |
AE |
SYSMGR_DISK_ALERT_RED |
200034 |
Disk usage is above 90%% (critically high). Please clean up unnecessary files. |
Disk usage is above 90% |
AE |
SYSMGR_MEMORY_ALERT_RED |
200055 |
System memory usage is above 90%% (critically high) |
System memory usage is above 90% |
AE |
SYSMGR_REBOOT_HALTED |
200039 |
Reboot (reason: %s) terminated...too many reboots |
System manager stopped short of rebooting the device because it detected too many reboots in a short period of time |
AE |
SYSMGR_UPGRADE_FAILED |
200052 |
Software upgrade to version %s failed because of reason |
Software upgrade failed |
AE |
TCPD: TCP Options Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
TCPD_MSGQ_SERVER |
2800002 |
Server Exception: %s |
Proxy server did not accept connection |
E |
TCPD_PROXY |
2800004 |
Enabled TCP_OPT for vpn %lu: %s:%u %s Starting sysmgr_app object tcpd<->ftmd channel established tcpd<->ftmd = Will try connecting |
Messages related to starting a proxy |
E |
TCPD_PROXY |
2800004 |
tcpd error counters -%s |
Count of TCP option errors |
E |
TCPD_SYSLOG_END |
2800001 |
Terminating TCP options |
TCP options process ending |
E |
TCPD_SYSLOG_START |
2899999 |
Starting TCP options |
TCP options process starting |
E |
TCPD_SYSMGR_APP |
2800003 |
%s Exception: %s %s - Sysmgr app::connect -Exception - %s |
Messages related to the connection between the system manager and the TCP proxy process |
E |
Priority: Debug
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
TCPD_SYSMGR_APP |
2800003 |
%s - Registering for send_hello-msg %s: Sending following register msg Sending msg of length %u %s - Sysmgr app::connect %s - Write %u bytes %s - Wrote register msg %u |
Messages related to the connection between the system manager and the TCP proxy process |
E |
TRACKER: Interface Tracker Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
TRACKER_SYSLOG_CONN_DOWN |
1700003 |
Connection to %s %s Down |
Connection to interface is down |
E |
TRACKER_SYSLOG_CONN_UP |
1700002 |
Connection to %s %s Up |
Connection to interface is up |
E |
TRACKER_SYSLOG_END |
1700001 |
Terminating |
Interface tracker process is ending |
E |
TRACKER_SYSLOG_START |
1799999 |
Starting |
Interface tracker process is starting |
E |
VCONFD: Cisco Catalyst SD-WAN Configuration Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
VCONFD_SYSLOG_END |
1400001 |
Terminating |
Configuration process is ending |
E |
TRACKER_SYSLOG_NOTIFICATION |
1400002 |
Notification: %d/%d?%d %d:%d:%d %s severity level: %s hostname: %s system-ip %s process name: %s process id: %s reason: %s |
Configuration at specified date and time for a process, with reason |
E |
TRACKER_SYSLOG_NOTIFICATION |
1400002 |
Notification: %d/%d?%d %d:%d:%d %s severity level: %s hostname: %s system-ip %s status: %s install id: %s message %s |
Configuration at specified date and time, with specified status (minor, major) |
E |
TRACKER_SYSLOG_NOTIFICATION |
1400002 |
Notification: %d/%d?%d %d:%d:%d %s severity level: %s hostname: %s system-ip %s reason: %s |
Configuration at specified date and time, with reason |
E |
TRACKER_SYSLOG_NOTIFICATION |
1400002 |
Notification: %d/%d?%d %d:%d:%d %s severity level: %s hostname: %s system-ip %s reboot reason: %s |
Configuration at specified date and time, with reboot reason |
E |
TRACKER_SYSLOG_NOTIFICATION |
1400002 |
Notification: %d/%d?%d %d:%d:%d %s severity level: %s hostname: %s system-ip %s username: %s remote host: %s |
Configuration at specified date and time, for username and remote host |
E |
TRACKER_SYSLOG_NOTIFICATION |
1400002 |
Notification: %d/%d?%d %d:%d:%d %s severity level: %s hostname: %s system-ip %s vpn id: %s if name: %s mac addr: %s ip-addr:%s |
Configuration at specified date and time, for VPN, interface, MAC address, and IP address |
E |
VCONFD_SYSLOG_START |
1499999 |
Starting |
Configuration process is starting |
E |
VDAEMON: Cisco Catalyst SD-WAN Software Process
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
VDAEMON_SYSLOG_DOMAIN_ID_CHANGE |
500006 |
System Domain-ID changed from '%d' to '%d', |
System domain ID changed |
E |
VDAEMON_SYSLOG_END |
599999 |
— |
Process ending |
E |
VDAEMON_SYSLOG_ORG_NAME_CHANGE |
500008 |
System Organization-Name changed from '%s' to '%s' |
System organization name changed |
E |
VDAEMON_SYSLOG_PEER_STATE |
500003 |
Peer %s Public-TLOC %s Color %u %s, |
Peer state changed to up or down |
E |
VDAEMON_SYSLOG_SITE_ID_CHANGE |
500005 |
System Site-ID changed from '%d' to '%d' |
System site ID changed |
E |
VDAEMON_SYSLOG_START |
500001 |
— |
Process starting |
E |
VDAEMON_SYSLOG_SYSTEM_IP_CHANGE |
500007 |
System-IP changed from '%s' to '%s' |
System IP address changed |
E |
Priority: Error
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
VDAEMON_BOARD_ID_CHALLENGE_FAILED |
500002 |
— |
Board ID could not be verified |
E |
VDAEMON_BOARD_ID_INIT_FAILED |
500001 |
— |
Board initialization failed because board ID could not be verified |
E |
VDAEMON_SYSLOG_CERT_STORE_FAIL |
500009 |
Certificate store init failed |
Certificate not stored |
AE |
VDAEMON_SYSLOG_PEER_AUTH_FAIL |
500004 |
Peer %s Public-TLOC %s Color %u %s |
Authentication with a vdaemon peer failed |
E |
VDAEMON_SYSLOG_PEER_STATE |
500003 |
Failed to read system host name |
Internal error reading system hostname; device will not register with the Cisco SD-WAN Manager server or ZTP will fail |
A |
VRRP: Virtual Router Redundancy Protocol
The VRRP process runs only on Cisco vEdge devices.
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
VRRPD_STATE_CHANGE |
600002 |
Group %d, interface %s, vpn %lu state changed to %s |
VRRP interface state change |
E |
VRRPD_SYSLOG_END |
699999 |
Terminating VRRPD |
VRRP process is ending |
E |
VRRPD_SYSLOG_START |
600001 |
Starting VRRPD |
VRRP process is starting |
E |
WLAN: Wireless LAN Process
The wireless LAN process runs only on Cisco vEdge devices.
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
WLAN_SYSLOG_END |
2300001 |
Terminating wlan |
WLAN process is ending |
E |
WLAN_SYSLOG_START |
2399999 |
Starting wlan |
WLAN process is starting |
E |
WWAND: Cellular Process
The wireless WAN process runs only on Cisco vEdge devices.
Priority: Informational
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
WWAN_SYSLOG_ADMIN_DWL |
2400010 |
Cellular%d interface is set for deletion |
Cellular interface is about to be deleted |
E |
WWAN_SYSLOG_ADMIN_DOWN |
2400009 |
Cellular%d interface is set to admin down |
Cellular interface is administratively Down |
E |
WWAN_SYSLOG_ADMIN_UP |
2400008 |
Cellular%d interface is set to admin up |
Cellular interface is administratively Up |
E |
WWAN_SYSLOG_CONNECT |
2400002 |
Connected to Cellular%d modem |
Connection to cellular modem established |
E |
WWAN_SYSLOG_CONNECT_DATA |
2400006 |
— |
— |
E |
WWAN_SYSLOG_DATA_MONITOR |
2400032 |
Info: %lld bytes left Info: exceeded by %lld bytes |
Information about amount of data remaining in billing cycle |
E |
WWAN_SYSLOG_DATA_SESSION |
2400019 |
Data session started successfully |
Data session on cellular interface started successfully |
E |
WWAN_SYSLOG_DATA_SESSION_BEARER |
2400028 |
Data bearer changed to %s (%lx) |
Data carrier changed |
E |
WWAN_SYSLOG_DATA_SESSION_DISCONNECT |
2400023 |
Data session disconnect: restarting session |
Data session was disconnected and is restarting |
E |
WWAN_SYSLOG_DATA_SESSION_DISC_REASON |
2400024 |
Data session disconnect reason: %s |
Reason data session was disconnected |
E |
WWAN_SYSLOG_DATA_SESSION_DISC_VERB |
2400025 |
Data session disconnect reason verbose: %s |
More information about why data session disconnected |
E |
WWAN_SYSLOG_DATA_SESSION_DOMAIN |
2400026 |
Packet-switched domain state change to %s: registration: %s ran: %s if: %s |
Packet-switched domain changed |
E |
WWAN_SYSLOG_DATA_SESSION_DORMANCY |
2400029 |
Dormancy state changed to %s |
Session dormancy state changed |
E |
WWAN_SYSLOG_DATA_SESSION_NETWORK |
2400027 |
Network registration changed to %s: domain: %s ran: %s if: %s |
Network registration changed |
E |
WWAN_SYSLOG_DATA_SESSION_START |
2400018 |
Starting data session on Cellular%e |
Data session on cellular interface is starting |
E |
WWAN_SYSLOG_DATA_SESSION_STATE |
2400020 |
Data session state changed to %s |
Data session status |
E |
WWAN_SYSLOG_DATA_SESSION_STOP |
2400022 |
Data session stopped successfully |
Data session stopped |
E |
WWAN_SYSLOG_DISCONNECT |
2400003 |
Disconnected LTE modem %d |
Disconnection from LTE modem |
E |
WWAN_SYSLOG_END |
2400001 |
Terminating WWAND |
Ending WWAN process |
E |
WWAN_SYSLOG_FIRMWARE |
2400007 |
Failed to get firmware details after upgrade on modem %d Firmware upgrade failed on modem %d Firmware upgrade successful on modem %d Upgrading firmware configuration on modem %d Upgrading firmware image on modem %d |
Messages related to firmware upgrade on the cellular modem |
E |
WWAN_SYSLOG_LR_DOWN |
2400012 |
%s%d: bringing down |
Last-resort interface is shutting down |
E |
WWAN_SYSLOG_LR_UP |
2400011 |
%s%d: bringing up |
Last-resort interface is starting |
E |
WWAN_SYSLOG_MODEM_ACTIVATION |
2400039 |
Modem activation status: %s (%lu) |
Modem actual state and status |
E |
WWAN_SYSLOG_MODEM_PMODE |
2400017 |
Modem is not in online mode Modem is not in online mode (tmp: %s degrees C) Modem power state is: %s (prev: %s) Modem set to %s (prev: %s) Powered off the modem %d |
Messages related to modem power mode status |
E |
WWAN_SYSLOG_MODEM_STATE |
2400034 |
Modem device state changed to %s |
Modem state changed |
E |
WWAN_SYSLOG_MODEM_TEMP |
2400037 |
Modem temperature %d degree C: %s |
Modem temperature and state |
E |
WWAN_SYSLOG_MODEM_UP |
2400035 |
WWAN cellular%d modem is back up |
Modem reconnected |
E |
WWAN_SYSLOG_OMA_DM_DONE |
2400041 |
Modem OMA DM configuration completed |
Modem OMA-DM configuration finished |
E |
WWAN_SYSLOG_OPER_DOWN |
2400014 |
Cellular%d set if down |
Cellular interface is operationally Down |
E |
WWAN_SYSLOG_OPER_UP |
2400013 |
Cellular%d set if up |
Cellular interface is operationally Up |
E |
WWAN_SYSLOG_PROFILE_CHECK |
2400030 |
Profile %lu with PDP: %s APN: %s Auth: %s User: %s |
Cellular profile information |
E |
WWAN_SYSLOG_REBOOT |
2400040 |
Cellular%d modem mode updated: rebooting; %s reason |
Reason why celluar modem rebooted |
E |
WWAN_SYSLOG_SDK_DOWN |
2400005 |
SDK got terminated: %s |
Connection to software development kit terminated |
E |
WWAN_SYSLOG_SDK_UP |
2400004 |
Connected to Cellular%d sdk process |
Connection to cellular software development kit established |
E |
WWAN_SYSLOG_SIM_STATUS |
2400033 |
SIM status changed to: %s |
SIM status changed |
E |
WWAN_SYSLOG_START |
2499999 |
Starting WWAND |
Starting WWAN process |
E |
WWAN_SYSLOG_TRACK_GW_UP |
2400015 |
Cellular%d gateway %s is reachable |
Cellular gateway is reachable |
E |
Priority: Error
Message |
Number |
Message Format |
Description |
Action |
---|---|---|---|---|
WWAN_SYSLOG_AUTO_PROFILE_MISS |
2400031 |
Manually configure APN profile for the data connection |
Data session could not start because required APN could not be located |
E |
WWAN_SYSLOG_MODEM_DOWN |
2400036 |
WWAN cellular%d modem went down |
Modem is disconnected |
E |
WWAN_SYSLOG_MODEM_RESET |
2400038 |
Failed to recover Cellular %d modem |
Connection to modem could not be reestablished |
E |
WWAN_SYSLOG_TRACK_GW_DOWN |
2400016 |
Cellular%d gateway %s is not reachable |
Cellular gateway is not reachable |
E |
UTD Syslogs
The tables below list the syslog messages generated by the following United Threat Defense (UTD) features:
Intrusion Prevention System/Intrusion Detection System
Message |
Message Format |
Description |
Action |
---|---|---|---|
IPS Activity |
<DATE-TIMESTAMP> [**] [Hostname: <SYSTEM_HOSTNAME>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] <ACTION> [**] [1:21475:4] <DESCRIPTION> [**] [Classification: <CLASSIFICATION_TYPE>] [Priority: <PRIORITY_VALUE>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR>:<SOURCE_PORT_NUM> -> <DESTINATION_IP_ADDR>:<DEST_PORT_NUM> |
Based on classification the IPS alert or drop action is done which is indicated in the log message. |
Alert / Drop |
URL Filtering
Message |
Message Format |
Action |
---|---|---|
UTD WebFilter Whitelist |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Pass [**] UTD WebFilter Whitelist [**] [URL: <URL>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR>> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Pass |
UTD WebFilter Blacklist |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Drop [**] UTD WebFilter Blacklist [**] [URL: <URL>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR>> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Drop |
UTD WebFilter Category/Reputation |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Drop [**] UTD WebFilter Category/Reputation [**] [URL: <URL>] ** [Category: <CATEGORY_NAME>] ** [Reputation: <REP_SCORE>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR>> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Drop |
TLS Decryption
Message |
Message Format |
Action |
---|---|---|
UTD TLS Decryption Whitelist |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Never-Decrypt [**] UTD TLS Decryption Whitelist [**] [URL: <URL>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Never-Decrypt |
UTD TLS Decryption Graylist |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Skip-Decrypt [**] UTD TLS Decryption Graylist [**] [URL: <URL>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Skip-Decrypt |
UTD TLS Decryption Blacklist |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Decrypt [**] UTD TLS Decryption Blacklist [**] [URL: <URL>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Decrypt |
UTD TLS Decryption Category Never-Decrypt |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Never-Decrypt [**] UTD TLS Decryption Category Never-Decrypt [**] [URL: <URL>] ** [Category: <SSL_CATEGORY_NAME>] ** [Reputation: <REP_SCORE>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Never-Decrypt |
UTD TLS Decryption Reputation Decrypt |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Decrypt [**] UTD TLS Decryption Reputation Decrypt [**] [URL: <URL>] ** [Category: <SSL_CATEGORY_NAME>] ** [Reputation: <REP_SCORE>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Decrypt |
UTD TLS Decryption Reputation Skip-Decrypt |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Skip-Decrypt [**] UTD TLS Decryption Reputation Skip-Decrypt [**] [URL: <URL>] ** [Category: <SSL_CATEGORY_NAME>] ** [Reputation: <REP_SCORE>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Skip-Decrypt |
UTD TLS Decryption Category Decrypt |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Decrypt [**] UTD TLS Decryption Category Decrypt [**] [URL: <URL>] ** [Category: <SSL_CATEGORY_NAME>] ** [Reputation: <REP_SCORE>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Decrypt |
UTD TLS Decryption Category Skip-Decrypt |
<DATE-TIMESTAMP> [**] [Hostname: <HOSTNAME_VALUE>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <ID_NUM>] [**] Skip-Decrypt [**] UTD TLS Decryption Category Skip-Decrypt [**] [URL: <URL>] ** [Category: <SSL_CATEGORY_NAME>] ** [Reputation: <REP_SCORE>] [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR> -> <DESTINATION_IP_ADDR>:<PORT_NUM> |
Skip-Decrypt |
AMP File Inspection
Message |
Message Format |
Action |
---|---|---|
Clean File Signature |
<DATE-TIMESTAMP> [**] [Hostname: <SYSTEM_HOSTNAME>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <instance_id>] [**] Allow [**] UTD AMP DISPOSITION CLEAN [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR>:<PORT_NUM> -> <DESTINATION_IP_ADDR>: <PORT_NUM> |
Allow |
Unknown File Signature |
<DATE-TIMESTAMP> [**] [Hostname: <SYSTEM_HOSTNAME>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <instance_id>] [**] Allow [**] UTD AMP DISPOSITION UNKNOWN [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR>:<PORT_NUM> -> <DESTINATION_IP_ADDR>: <PORT_NUM> |
Allow |
Malicious File Signature |
<DATE-TIMESTAMP> [**] [Hostname: <SYSTEM_HOSTNAME>] [**] [System_IP: <SYSTEM_IP_ADDR>] [**] [Instance_ID: <instance_id>] [**] Allow [**] UTD AMP DISPOSITION MALICIOUS [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> [VRF: <VRF_ID>] {<PROTOCOL>} <SOURCE_IP_ADDR>:<PORT_NUM> -> <DESTINATION_IP_ADDR>: <PORT_NUM> |
Drop |
Threatgrid
Message |
Message Format |
Action |
---|---|---|
Retro Clean |
<DATE-TIMESTAMP> [**] Allow [**] UTD AMP RETRO CLEAN [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Allow |
Retro Unknown |
<DATE-TIMESTAMP> [**] Allow [**] UTD AMP RETRO UNKNOWN [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Allow |
Retro Malicious |
<DATE-TIMESTAMP> [**] Drop [**] UTD AMP RETRO MALICIOUS [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Drop |
Retro Error |
<DATE-TIMESTAMP> [**] Error [**] UTD AMP RETRO ERROR [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Error |
File Upload Fail |
<DATE-TIMESTAMP> [**] Unknown [**] TG FILE UPLOAD FAILED [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Unknown |
File Upload Success |
<DATE-TIMESTAMP> [**] Unknown [**] TG FILE UPLOAD SUCCESS [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Unknown |
File Upload Not interesting |
<DATE-TIMESTAMP> [**] Unknown [**] TG FILE UPLOAD NOT INTERESTING [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Unknown |
File Upload Limit Reached |
<DATE-TIMESTAMP> [**] Unknown [**] TG FILE UPLOAD LIMIT REACHED [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Unknown |
File Upload API Key Invalid |
<DATE-TIMESTAMP> [**] Unknown [**] TG FILE UPLOAD APIKEY INVALID [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Unknown |
File Upload Internal Error |
<DATE-TIMESTAMP> [**] Unknown [**] TG FILE UPLOAD INT ERROR [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Unknown |
File Upload System Error |
<DATE-TIMESTAMP> [**] Unknown [**] TG FILE UPLOAD SYS ERROR [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Unknown |
File Upload Not Supported |
<DATE-TIMESTAMP> [**] Unknown [**] TG FILE UPLOAD NOT SUPPORTED [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Unknown |
File Upload Whitelisted |
<DATE-TIMESTAMP> [**] Unknown [**] TG FILE UPLOAD WHITELISTED [**] SHA: <SHA_VALUE> Malware: None Filename: <FILENAME> Filetype: <FILETYPE> |
Unknown |