8.4.2 - Log Collectors and Syslog

These flashcards cover key concepts related to log collectors and syslog protocols as mentioned in the lecture notes.

Log Collector

A system that receives event messages from multiple devices for centralized storage and management.

Syslog

A protocol and software used for log collection and event messaging in distributed systems.

UDP port 514

The default network port used by syslog collectors to receive log messages.

PRI Code

A code in a syslog message calculated from the facility and severity level.

Syslog Message Format

Consists of a PRI code, a header with a timestamp and hostname, and a message part.

Severity Level

A classification within the PRI code that indicates the importance of the log message.

Facility

A code that indicates the source or type of the log message in syslog.

Open Format

A flexible structure for event data that allows for various content formats in syslog messages.

Content Format

Format of the payload in a syslog message, which can include space- or comma-delimited fields or JSON data.

Event Logging

The process of recording messages or events generated by network devices or applications.