SD-LAN Event Logs
For supported software information, click here.
SD-LAN event logs include statistics for events in the following categories:
- Bridge domains
- IEEE 802.1X port-based identification (referred to as dot1x)
- IP source guard
- Microsegmentation
- Network processing unit (NPU) traffic monitoring
Bridge Domain Event Logs
Bridge Domain Log Message Format
2023-12-19T08:56:44+0000 bdIfEventLog, applianceName=AccessSw-Dev, tenantName=Tenant1, tenantId=3, vsnId=0, bdifName=BD-10, vlanId=10, bdifEvent=Add
Bridge Domain Log Message Fields
| Field | Description |
|---|---|
| applianceName |
Name of the Versa Operating SystemTM (VOSTM) device. This is the name displayed in the output of the show system identification CLI command on the VOS device. |
| tenantName | Name of the organization (tenant). |
| tenantId | Tenant identifier. This value is allocated internally by the VOS device. |
| vsnId | Virtual service network (VSN) ID number. |
| bdifName | Name of the bridge domain interface. |
| vlanId | VLAN identification number. |
| bdifEvent | Name of the bridge domain event. |
Dot1x Event Logs
Dot1x Log Message Format
2023-12-15T05:01:04+0000 dot1xEventsLog, applianceName=AccessSw-Dev, tenantName=Tenant1, tenantId=3, vsnId=0, macAddr=00:00:00:00:00:01, dot1xEventname=Add, dot1xEventDesc=Dot1X add event, vlanId=20, filterName=Filter1, framedIp=1.1.1.1
Dot1x Log Message Fields
| Field | Description |
|---|---|
| applianceName |
Name of the VOSTM device. This is the name displayed in the output of the show system identification CLI command on the VOS device. |
| tenantName | Name of the organization (tenant). |
| tenantId | Tenant identifier. This value is allocated internally by the VOS device. |
| vsnId | Virtual service network (VSN) ID number. |
| macAddr | MAC address. |
| dot1xEventname | Name of dot1x event. |
| dot1xEventDesc |
Description of the event in the dot1xEventname field. |
| vlanId | VLAN identification number. |
| filterName | Name of dot1x filter. |
| framedIp | Dot1x framed IP address. |
IP Source Guard Logs
IP Source Guard Log Message Format
2024-01-05T09:07:54+0000 ipSourceGuardeventsLog, applianceName=AccessSw-Dev, tenantName=Tenant1, tenantId=3, vsnId=0, ipAddr=192.168.20.32, macAddr=b4:b6:86:2f:17:a2, interfaceName=enet-0/7.100, bdName=bd100, vlanId=100, ipSrcGuardAction=Add
IP Source Guard Log Message Fields
| Field | Description |
|---|---|
| applianceName |
Name of the VOS device. This is the name displayed in the output of the show system identification CLI command on the VOS device. |
| tenantName | Name of the organization (tenant). |
| tenantId | Tenant identifier. This value is allocated internally by the VOS device. |
| vsnId | Virtual service network (VSN) ID number. |
| ipAddr | IP address. |
| macAddr | MAC address. |
| interfaceName | Name of interface. |
| dbName | Name of bridge domain. |
| vlanId | VLAN identification number. |
| ipSrcGuardAction | IP source guard action. |
Microsegmentation Event Logs
Microsegmentation logs are sent when a microsegmentation rule triggers an event and logging is enabled for SD-LAN.
Microsegmentation Log Message Format
2024-11-21T12:02:16+0000 microsegClientLog, applianceName=CSX-4500, tenantName=Tenant1, tenantId=3, vsnId=0, vrfName=vr, ipAddr=192.168.20.32, macAddr=b4:b6:86:2f:17:a2, hostType=Clientless, segmentName=S2, oldSegmentname=, microsegEventname=Add, bdName=, microsegRulename=r1
Microsegmentation Log Message Fields
| Field | Description |
|---|---|
| applianceName |
Name of the VOS device. This is the name displayed in the output of the show system identification CLI command on the VOS device. |
| tenantName | Name of the organization (tenant). |
| tenantId | Tenant identifier. This value is allocated internally by the VOS device. |
| vsnId | Virtual service network (VSN) ID number. |
| vrfName | Virtual routing and forwarding (VRF) name. |
| ipAddr | IP address. |
| macAddr | MAC address. |
| hostType | Type of host. |
| segmentName | Name of segment. |
| oldSegmentname |
Previous name of segment. |
| microsegEventname | Name of microsegmentation event: Add, Change, or Delete. |
| bdName | Name of bridge domain. |
| microsegRulename | Microsegmentation rule that triggered the event. |
NPU Traffic Monitoring Logs
NPU traffic monitoring logs are exported in a flow log of type sdlanFlowMonLog. For more information, see Flow Logs.
Supported Software Information
Releases 22.1.4 and later support all content described in this article.