Syslog

The Syslog resource provides insights into what syslog events have occurred on the network, how often they occurred, what devices were involved, and how severe the events seen were.

The API endpoint at /syslog/daily gives a daily overview of the syslog events seen.

Here is an example:

Copy{
    "date": "2021-08-02",
    "description": "The specified PM TCA has been declared.",
    "devices": [
        {
            "deviceName": "10.89.200.203",
            "deviceId": 26364428,
            "eventCount": 194
        },
        {
            "deviceName": "10.89.200.206",
            "deviceId": 26982242,
            "eventCount": 97
        }
    ],
    "messageType": "L1-PMENGINE-4-TCA",
    "totalEventCount": 291,
    "recommendation": "It is recommended to repair the source of the alarm.",
    "reviewedSeverity": 4,
    "syslogEventSeverity": 4,
    "timestamp": "2021-08-02T00:00:00"
},

The previous example tells us that the syslog message L1-PMENGINE-4-TCA ocurred 291 times on date 2021-08-02. It occurred on two devices: It occurred 194 times on the device with ID 26364428 and 97 times on the device with ID 26982242. The syslog severity is set to 4 and after a review it was rated as severity 4. The description and recommendations are listed.

In order to understand to which device this deviceId refers, please refer to the documentation on Inventory.