Dell-SYSLOG-MIB

All MIBs › Dell-SYSLOG-MIB

Organization: Dell

Last Updated: 2006-02-12

Category: Domain: Network Management, Vendor: Dell

Description: Manages system log (syslog) configuration, severity levels, and remote server settings on Dell devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Dell-SYSLOG-MIB?

Dell-SYSLOG-MIB is a vendor-specific MIB (module identity rlSyslog, ORGANIZATION "Dell") that models the SYSLOG logging subsystem on Dell network devices, registered under the shared Dell-MIB enterprise arm as rnd 82. It defines global logging controls (rlSyslogGlobalEnable, rlSyslogMinLogToConsoleSeverity, rlSyslogMinLogToFileSeverity, rlSyslogMinLogToCacheSeverity using the RlSyslogSeverity textual convention modeled on standard syslog severities), maintenance objects (rlSyslogClearLogfile, rlSyslogClearCache), and the rlSyslogLogTable which holds individual logged messages (rlSyslogLogDateTime, rlSyslogLogAppMnemonic, rlSyslogLogSeverity, rlSyslogLogMessageMnemonic) plus counters like rlSyslogFileMessagesLogged and rlSyslogCacheTotalMessages. This lets an NMS remotely inspect recent device log entries and log-buffer fill levels via SNMP without needing direct console or syslog-server access, useful for auditing severity thresholds and catching devices that are silently dropping low-severity events. The module's 'rl' object prefix reflects its shared lineage with other Dell rnd-arm MIBs, and administrators can download the Dell-SYSLOG-MIB file to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Dell-SYSLOG-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Dell network switches (rnd-arm managed devices)

Monitoring Examples

An operator polls rlSyslogCacheTotalMessages and rlSyslogFileMessagesLogged to check how full the memory cache and log file are, and walks rlSyslogLogTable filtering on rlSyslogLogSeverity; a growing count of critical(2) or emergency(0) entries in rlSyslogLogMessageMnemonic would indicate the device is experiencing repeated serious faults.

What Can Be Monitored

per-severity logging enable/thresholds (rlSyslogMinLogToConsoleSeverity, rlSyslogMinLogToFileSeverity, rlSyslogMinLogToCacheSeverity)
logged message table (rlSyslogLogTable: date/time, app mnemonic, severity, message text)
log file message count (rlSyslogFileMessagesLogged)
memory cache message count (rlSyslogCacheTotalMessages)
global syslog enable state (rlSyslogGlobalEnable)

Imported Objects

From Dell-MIB

rnd	MODULE-IDENTITY

From SNMPv2-SMI

Counter32
IpAddress
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using rlSyslogConsoleMessagesIgnored OID:

Select a Dell network switch (syslog subsystem) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type rlSyslogConsoleMessagesIgnored into the Find box to locate it in the OID tree, then select it and click OK. This is a count of messages not sent to the console because the severity level of the message was above rlSyslogMinLogToConsoleSeverity, the higher the level, the lower the severity. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
rlSyslog	1.3.6.1.4.1.89.82			The private MIB module definition for SYSLOG services in Dell devices.
rlSyslogPrivate	1.3.6.1.4.1.89.82.2
T/F rlSyslogGlobalEnable	1.3.6.1.4.1.89.82.2.1	TruthValue	read-write	Global enable for syslog flash, syslog cache and syslog UDP. When set to false, only console logging is performed.
RLS rlSyslogMinLogToConsoleSeverity	1.3.6.1.4.1.89.82.2.2	RlSyslogSeverity	read-write	The minimal severity to log to console. Lower severity will not be written to console. Value notActive indicate this activity is disabled.
RLS rlSyslogMinLogToFileSeverity	1.3.6.1.4.1.89.82.2.3	RlSyslogSeverity	read-write	The minimal severity to log to LogFile. Lower severity will not be written to the LogFile. Value notActive indicates this activity is disabled.
RLS rlSyslogMinLogToCacheSeverity	1.3.6.1.4.1.89.82.2.4	RlSyslogSeverity	read-write	The minimal severity to log to memory cache. Lower severity will not be read from cache. Value notActive indicate this activity is disabled. Note that all events are logged to cache unless its severity is notActive.
U32 rlSyslogClearLogfile	1.3.6.1.4.1.89.82.2.5	Unsigned32	read-write	Setting to a value other than 0 results in deleting the log file.
U32 rlSyslogClearCache	1.3.6.1.4.1.89.82.2.6	Unsigned32	read-write	Setting to a value other than 0 results in clearing the memory cache.
INT rlSyslogMibVersion	1.3.6.1.4.1.89.82.2.7	INTEGER	read-only	The Syslog MIB's version. It's 1.
rlSyslogLogTable	1.3.6.1.4.1.89.82.2.8		not-accessible	A table containing events sent to the system log file.
rlSyslogLogEntry	1.3.6.1.4.1.89.82.2.8.1		not-accessible	A log entry
U32 rlSyslogLogCounter	1.3.6.1.4.1.89.82.2.8.1.1	Unsigned32	read-only	A counter that identifies this entry - used to differentiate logged entries. And the order given is the order of logging. A entries may not form sequence of this value. (Time is not a differentiating element as logged entries may come in a sequence.
STR rlSyslogLogDateTime	1.3.6.1.4.1.89.82.2.8.1.2	DisplayString	read-only	The time in string (formated DD-MMM-YYYY HH:MM:SS e.g 14-Apr-2002 10:33:31), when the error was logged..
STR rlSyslogLogAppMnemonic	1.3.6.1.4.1.89.82.2.8.1.3	DisplayString	read-only	Application that created this error.
RLS rlSyslogLogSeverity	1.3.6.1.4.1.89.82.2.8.1.4	RlSyslogSeverity	read-only	Severity of the reported error.
STR rlSyslogLogMessageMnemonic	1.3.6.1.4.1.89.82.2.8.1.5	DisplayString	read-only	Short identifier of this message that created this error.
STR rlSyslogLogText1	1.3.6.1.4.1.89.82.2.8.1.6	DisplayString	read-only	The text of the logged message without time and date - part 1.
STR rlSyslogLogText2	1.3.6.1.4.1.89.82.2.8.1.7	DisplayString	read-only	The text of the logged message without time and date - part 2.
STR rlSyslogLogText3	1.3.6.1.4.1.89.82.2.8.1.8	DisplayString	read-only	The text of the logged message without time and date - part 3.
STR rlSyslogLogText4	1.3.6.1.4.1.89.82.2.8.1.9	DisplayString	read-only	The text of the logged message without time and date - part 4.
rlSyslogLogCacheTable	1.3.6.1.4.1.89.82.2.9		not-accessible	A table containing errors registered to system cache.
rlSyslogLogCacheEntry	1.3.6.1.4.1.89.82.2.9.1		not-accessible	A log history entry
U32 rlSyslogLogCacheCounter	1.3.6.1.4.1.89.82.2.9.1.1	Unsigned32	read-only	A counter that identifies this entry - used to differentiate logged entries. And the order given is the order of logging. A entries may not form sequence of this value. (Time is not a differentiating element as logged entries may come in a sequence.
STR rlSyslogLogCacheDateTime	1.3.6.1.4.1.89.82.2.9.1.2	DisplayString	read-only	The time in string (formated DD-MMM-YYYY HH:MM:SS e.g 14-Apr-2002 10:33:31), when the eroor was logged..
STR rlSyslogLogCacheAppMnemonic	1.3.6.1.4.1.89.82.2.9.1.3	DisplayString	read-only	Application that created this error.
RLS rlSyslogLogCacheSeverity	1.3.6.1.4.1.89.82.2.9.1.4	RlSyslogSeverity	read-only	Severity of the reported error.
STR rlSyslogLogCacheMessageMnemonic	1.3.6.1.4.1.89.82.2.9.1.5	DisplayString	read-only	Short identifier of this message that created this error.
STR rlSyslogLogCacheText1	1.3.6.1.4.1.89.82.2.9.1.6	DisplayString	read-only	The text of the logged message without time and date - part 1.
STR rlSyslogLogCacheText2	1.3.6.1.4.1.89.82.2.9.1.7	DisplayString	read-only	The text of the logged message without time and date - part 2.
STR rlSyslogLogCacheText3	1.3.6.1.4.1.89.82.2.9.1.8	DisplayString	read-only	The text of the logged message without time and date - part 3.
STR rlSyslogLogCacheText4	1.3.6.1.4.1.89.82.2.9.1.9	DisplayString	read-only	The text of the logged message without time and date - part 4.
C32 rlSyslogConsoleMessagesIgnoredEx	1.3.6.1.4.1.89.82.2.10	Counter32	read-only	This is a count of messages not sent to the console because the severity level of the message was above rlSyslogMinLogToConsoleSeverity, the higher the level, the lower the severity.
C32 rlSyslogFileMessagesIgnored	1.3.6.1.4.1.89.82.2.11	Counter32	read-only	This is a count of messages not sent to the file because the severity level of the message was above rlSyslogMinLogToFileSeverity, the higher the level, the lower the severity.
C32 rlSyslogFileMessagesLogged	1.3.6.1.4.1.89.82.2.12	Counter32	read-only	This is a count of all the messages currently held in the Log file.
C32 rlSyslogCacheTotalMessages	1.3.6.1.4.1.89.82.2.13	Counter32	read-only	This is a count of all the messages currently held in the cache.
T/F rlSyslogAggregationEnable	1.3.6.1.4.1.89.82.2.14	TruthValue	read-write	enable/disable Syslog aggregation
U32 rlSyslogAggregationAgingTime	1.3.6.1.4.1.89.82.2.15	Unsigned32	read-write	aging time for Syslog aggregated messages
RLS rlSyslogMinLogToWebSeverity	1.3.6.1.4.1.89.82.2.16	RlSyslogSeverity	read-write	The minimal severity to log to WEB client. Lower severity will not be displayed in WEB client. Value notActive indicate this activity is disabled.
T/F rlSyslogAlarmFlag	1.3.6.1.4.1.89.82.2.17	TruthValue	read-write	The MIB is initiated by false and it is set to true every time when a syslog message with severity >= min_severity_to_alarm_threshold (host parameter) is generated.
INT rlSyslogOriginId	1.3.6.1.4.1.89.82.2.18	INTEGER	read-write	Defines the origin field of the SYSLOG message packets sent to the SYSLOG server
STR rlSyslogOriginIdString	1.3.6.1.4.1.89.82.2.19	DisplayString	read-write	Defines the string origin of the SYSLOG message packets sent to the SYSLOG server
T/F rlSyslogHeaderSendingEnabled	1.3.6.1.4.1.89.82.2.20	TruthValue	read-write	Enabled sending/not sending of syslog header in syslog messages to syslog collectors.
rlSyslogCountersPerSeverityTable	1.3.6.1.4.1.89.82.2.21		not-accessible	The table displays counters per syslog severity
rlSyslogCountersPerSeverityEntry	1.3.6.1.4.1.89.82.2.21.1		not-accessible	Static row for this table.
INT rlSyslogCountersPerSeverityIndex	1.3.6.1.4.1.89.82.2.21.1.1	INTEGER	not-accessible	The table contains only one static entry.
C32 rlSyslogCountersPerSeverityEmergencyCounter	1.3.6.1.4.1.89.82.2.21.1.2	Counter32	read-only	Counts Emergency syslog messages
C32 rlSyslogCountersPerSeverityAlertCounter	1.3.6.1.4.1.89.82.2.21.1.3	Counter32	read-only	Counts Alert syslog messages
C32 rlSyslogCountersPerSeverityCriticalCounter	1.3.6.1.4.1.89.82.2.21.1.4	Counter32	read-only	Counts Critical syslog messages
C32 rlSyslogCountersPerSeverityErrorCounter	1.3.6.1.4.1.89.82.2.21.1.5	Counter32	read-only	Counts Error syslog messages
C32 rlSyslogCountersPerSeverityWarningCounter	1.3.6.1.4.1.89.82.2.21.1.6	Counter32	read-only	Counts Warning syslog messages
C32 rlSyslogCountersPerSeverityNoticeCounter	1.3.6.1.4.1.89.82.2.21.1.7	Counter32	read-only	Counts Notice syslog messages
C32 rlSyslogCountersPerSeverityInfoCounter	1.3.6.1.4.1.89.82.2.21.1.8	Counter32	read-only	Counts Info syslog messages
C32 rlSyslogCountersPerSeverityDebugCounter	1.3.6.1.4.1.89.82.2.21.1.9	Counter32	read-only	Counts Debug syslog messages
rlSyslogLastIndexPerSeverityTable	1.3.6.1.4.1.89.82.2.22		not-accessible	The table displays Last Index per syslog severity
rlSyslogLastIndexPerSeverityEntry	1.3.6.1.4.1.89.82.2.22.1		not-accessible	Static row for this table.
INT rlSyslogLastIndexPerSeverityIndex	1.3.6.1.4.1.89.82.2.22.1.1	INTEGER	not-accessible	The table contains only one static entry.
C32 rlSyslogLastIndexPerSeverityEmergencyIndex	1.3.6.1.4.1.89.82.2.22.1.2	Counter32	read-only	Shows Index of last added Emergency syslog message
C32 rlSyslogLastIndexPerSeverityAlertIndex	1.3.6.1.4.1.89.82.2.22.1.3	Counter32	read-only	Shows Index of last added Alert syslog message
C32 rlSyslogLastIndexPerSeverityCriticalIndex	1.3.6.1.4.1.89.82.2.22.1.4	Counter32	read-only	Shows Index of last added Critical syslog message
C32 rlSyslogLastIndexPerSeverityErrorIndex	1.3.6.1.4.1.89.82.2.22.1.5	Counter32	read-only	Shows Index of last added Error syslog message
C32 rlSyslogLastIndexPerSeverityWarningIndex	1.3.6.1.4.1.89.82.2.22.1.6	Counter32	read-only	Shows Index of last added Warning syslog message
C32 rlSyslogLastIndexPerSeverityNoticeIndex	1.3.6.1.4.1.89.82.2.22.1.7	Counter32	read-only	Shows Index of last added Notice syslog message
C32 rlSyslogLastIndexPerSeverityInfoIndex	1.3.6.1.4.1.89.82.2.22.1.8	Counter32	read-only	Shows Index of last added Info syslog message
C32 rlSyslogLastIndexPerSeverityDebugIndex	1.3.6.1.4.1.89.82.2.22.1.9	Counter32	read-only	Shows Index of last added Debug syslog message
rlSyslogPhaseOneTests	1.3.6.1.4.1.89.82.3
INT rlSyslogPhaseOneTestGenerator	1.3.6.1.4.1.89.82.3.1	INTEGER	read-write	Writing a value to this leaf results in a test being run on the host.

RFC description

Dell enterprise MIB defining syslog server configuration and message filtering objects for Dell PowerEdge servers and networking equipment.

Start monitoring Dell network switch (syslog subsystem) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Dell-SYSLOG-MIB