DRAFT-IETF-SYSLOG-DEVICE-MIB

MIB Reference — IPNetwork Monitor · Updated October 05, 2026

All MIBs › DRAFT-IETF-SYSLOG-DEVICE-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2002-06-06

Category: Standard: IETF, Technology: Logging/Syslog

Description: Draft IETF MIB for managing syslog relay devices that collect and forward system log messages.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is DRAFT-IETF-SYSLOG-DEVICE-MIB?

DRAFT-IETF-SYSLOG-DEVICE-MIB is a draft IETF, vendor-neutral MIB for managing devices that generate and forward Syslog-compatible diagnostic messages, covering the configuration and generation side of syslog message handling on a device. It exposes counters and status for the syslog subsystem itself, along with a table of configured syslog collector (destination server) entries. Its monitoring value lies in tracking the software-level health of a device's logging subsystem, such as how many messages have been generated, how many were dropped due to resource limits, and when the last message was sent, which can reveal logging pipeline problems or an overloaded device before they show up elsewhere. It is a vendor-neutral extension of the base Syslog protocol concept and is typically deployed alongside DRAFT-IETF-SYSLOG-MIB (which covers message formatting/reception) on network devices, servers, and appliances that emit syslog. It is used in network operations centers to confirm that a device's remote logging is functioning and not silently dropping diagnostic data. Engineers can download the DRAFT-IETF-SYSLOG-DEVICE-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in DRAFT-IETF-SYSLOG-DEVICE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

  • vendor-neutral, standards-based MIB, not tied to a specific manufacturer
  • any network device or server generating syslog messages

Monitoring Examples

An admin would poll snmpSyslogDeviceMessages and snmpSyslogDeviceMessagesDropped to detect whether the device is generating log messages faster than it can send them, a nonzero dropped-count signals a logging or network bottleneck; snmpSyslogDeviceLastMessageTime confirms recent activity. The snmpSyslogCollectorTable/snmpSyslogCollectorEntry rows, indexed by snmpSyslogCollectorIndex, list each configured destination collector with its snmpSyslogCollectorAddressType and snmpSyslogCollectorDescription, letting an operator verify the correct log server is configured and reachable.

What Can Be Monitored

  • syslog messages generated
  • syslog messages dropped
  • last syslog message time
  • configured syslog collector servers
  • syslog collector table capacity
Imported Objects

From CISCOSB-MIB

rlSyslogOBJECT-IDENTITY

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32
snmpModules

From SNMPv2-TC

RowStatus
TEXTUAL-CONVENTION
TimeStamp

How to Use in IPNetwork Monitor

Example using snmpSyslogDeviceMessages OID:

Select a Network device/server generating syslog message (vendor-neutral IETF draft standard, Cisco-authored) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type snmpSyslogDeviceMessages into the Find box to locate it in the OID tree, then select it and click OK. The number of messages successfully delivered to the upstream side of the syslog device software for processing. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs

RFC description

IETF draft standard for syslog device MIB; defines managed objects for syslog servers and device syslog configuration.

Start monitoring Network device/server generating syslog messages (vendor-neutral IETF draft standard, Cisco-authored) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DRAFT-IETF-SYSLOG-DEVICE-MIB