> For the complete documentation index, see [llms.txt](https://doc.engenius.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.engenius.ai/home-ecs-user-manual/analyze/logs.md). # Logs The Syslog protocol allows devices to send event notification messages in response to events, faults, or errors occurring on the platform as well as changes in configuration or other occurrences across an IP network to syslog servers. It then collects the event messages, providing powerful support for users to monitor network operations and diagnose malfunctions. A Syslog-enabled device can generate a syslog message and send it to a Syslog server. Syslog is defined in RFC 3164. The RFC defines the packet format, content, and system log related information of Syslog messages. Each Syslog message has a facility and severity level. The Syslog facility identifies a file in the Syslog server. Refer to the documentation of your Syslog program for details. ## Global Settings ![](/files/gN8YERQTWMaZsqIBj3hD) From here, you can select "Enabled or "Disabled" for the log settings of the switch. Click the **Appl**y button to apply the changes or the **Reset** button to discard them. ## Local Logging ![](/files/djRAqjJjUdB7RrK2oyDi) The following table describes the Syslog severity levels. | Code | Severity | Description | General Description | | ---- | -------- | --------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | 0 | EMERG | System is unusable. | A "panic" condition usually affecting multiple apps/servers/sites. At this level, all tech staff on call would be notified. | | 1 | ALERT | Action must be taken immediately. | Should be corrected immediately. Therefore, notify staff who can fix the problem. An example would be the loss of a primary ISP connection. | | 2 | CRIT | Critical conditions. | Should be corrected immediately but indicates failure in a secondary system; an example is a loss of a backup ISP connection. | | 3 | ERROR | Error conditions. | Non-urgent failures, which should be relayed to developers or admins; each item must be resolved within a given time. | | 4 | WARNING | Warning conditions. | Warning messages, not an error, but indication that an error will occur if action is not taken (e.g. file system 85% full). Each item must be resolved within a given time. | | 5 | NOTICE | Normal but significant condition. | Events that are unusual but not error conditions - might be summarized in an email to developers or admins to spot potential problems - no immediate action required. | | 6 | INFO | Informational messages | Normal operational messages - may be harvested for reporting, measuring throughput, etc. - no action required. | | 7 | DEBUG | Debug messages | Messages that contain information for debugging purpose. | Click the **Edit** button to apply the changes in RAM or Flash target, respectively. ![](/files/t7OmuRJGAskIaUcNn3K4) Click the **Apply** button ![](https://lh4.googleusercontent.com/XMTT8fQ_7-ZeiTvPvRukhv4L0AWct-vSxOhJ3FoFWDUz8lDDOjnB8z3TS4i_dfpCcqDBxi9QK4HLZqqmzieIB9UCQ1h53_LAGhePHU3Qf2lhtLDRweUMCw4lAm_zW7gnMjcOFfg) to accept the changes or the **Cancel** button ![](https://lh4.googleusercontent.com/jJmheoNlaq72LJAXVDSIwNSMs0tSJ8vbDx8UOLAI0IBsDdBZIIDh3GYCbel72dhgAeKuBGcf3SZ3GtC3LCTu9yuKIXTWrYmvZ9c6qgWAr1IfYNoN98KfsdWYobvrFEqGe7xpwYo) to discard them. ## Remote Logging ![](/files/GMDAt6H4sRWRrwronpps) The internal log of the ECS switch has a fixed capacity; at a certain level, the ECS switch will start deleting the oldest entries to make room for the newest. If you want a permanent record of all logging activities, you can set up your syslog server to receive log content from the ECS switch. Use this page to direct all logging to the syslog server. Click the Add button, define your syslog server, and select the severity level of events you wish to log. Click the **Add** button to add the remote server for syslog logging: ![](/files/5LQupylepnnT6Ge4gmDo) Click the **Apply** button ![](https://lh4.googleusercontent.com/XMTT8fQ_7-ZeiTvPvRukhv4L0AWct-vSxOhJ3FoFWDUz8lDDOjnB8z3TS4i_dfpCcqDBxi9QK4HLZqqmzieIB9UCQ1h53_LAGhePHU3Qf2lhtLDRweUMCw4lAm_zW7gnMjcOFfg) to accept the changes or the **Cancel** button ![](https://lh4.googleusercontent.com/jJmheoNlaq72LJAXVDSIwNSMs0tSJ8vbDx8UOLAI0IBsDdBZIIDh3GYCbel72dhgAeKuBGcf3SZ3GtC3LCTu9yuKIXTWrYmvZ9c6qgWAr1IfYNoN98KfsdWYobvrFEqGe7xpwYo) to discard them. ## Log Table This page displays the most recent records in the switch's internal log. Log entries are listed in reverse chronological order (with the latest logs at the top of the list). Click a column header to sort the content by that category. ### **Display logs in** * **RAM:** The information stored in the system’s RAM log will be lost after the switch is rebooted or powered off. * **Flash:** The information stored in the system’s Flash will be kept effective even if the switch is rebooted or powered off. ![](/files/tG75QKEo3JbUltMIs4PC) ![](/files/JlgObBrHdBQ92MBf4g5J) ### Download Click the **Download** button to export the current buffered log to a .txt file. ### Clear Click the **Clear** button to clear the buffered log in the system's memory. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://doc.engenius.ai/home-ecs-user-manual/analyze/logs.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.