< Home

Enabling the Information Center

The FW can output logs only after the information center is enabled.

Procedure

  1. Access the system view.

    system-view

  2. Enable the information center.

    info-center enable
    By default, the information center is enabled on the FW.

    When the information center is enabled and the system is busy sorting and outputting information, system performance is affected.

  3. Optional: Name an information channel.

    info-center channel channel-number name channel-name

    Each information channel must have a unique name, and the channel names must represent the actual channel functions.

  4. Optional: Configure a timestamp for logs.

    info-center timestamp log { boot | { date | short-date | format-date } [ second | precision-time { tenth-second | millisecond } ] } [ without-timezone ]

    The default log timestamp format is date.

  5. Optional: Configure log filtering for specified logs.

    info-center filter-id { id | bymodule-alias modname alias } &<1-50> [ bytime interval | bynumber number ]

    Currently, only 50 IDs can be shielded. The aggregation of these shielded IDs is called a log ID filtering list. The log ID filtering list is arranged by ID values.

  6. Optional: Run the following commands to configure the log suppression function.

    During the running of a device, if too many logs with the same log ID are generated, the information center is too busy processing these logs to process logs with other log IDs, which may even affect the running service. The information center monitors the traffic of logs with different log IDs. When the traffic of logs with a specific log ID repeatedly exceeds the threshold during the monitoring period, the information center suppresses the processing rate of these specified logs by processing only the conforming traffic and discarding the non-conforming traffic; when the traffic of logs with the specific log ID falls below the threshold and remains below the threshold for five monitoring periods, the suppression is removed.

    1. Run the info-center rate-limit threshold value [ byinfoid infoid | bymodule-alias modname alias ] command to set the maximum number of logs with the same log ID that the information center can process each second.

      By default, the information center processes a maximum of 50 logs with the same log ID each second. In certain application scenarios, the information center is required to process a maximum of more than 30 logs with the same log ID every second. You can set thresholds for logs with different log IDs.

      • If the threshold is too low, some logs may be discarded.
      • If the threshold is too high, the information center cannot identify the log ID under which too many logs are generated.

    2. Run the info-center rate-limit global-threshold value command to set the total number of logs that the information center can process each second.
    3. Run the info-center rate-limit monitor-period value command to set the period for the information center to limit the log processing rate.
    4. Run the info-center rate-limit except { byinfoid infoid | bymodule-alias modname alias } command to cancel the log processing rate limit for logs with the specified ID or module name.

      If logs with the specified ID or module name will never be generated in a huge number, you can run this command to cancel the log processing rate limit for the logs. After this command is run, the configured log processing rate limit will not be effective for logs with the specified ID or module name.

  7. Optional: Enable the statistical output of consecutive duplicate logs.

    info-center statistic-suppress enable

    On the FW, service modules generate logs and control the volume of generated logs. The information center processes the received logs.

    Service modules, such as ARP and VRRP produce large numbers of duplicate logs in short periods in some scenarios. In this case, you can enable the statistical output of consecutive duplicate logs to prevent the information center from the failure in processing other logs.

    Consecutive duplicate logs have the same ID and parameters, and they do not have two or more other logs in between.

  8. Optional: Enable the function of sending virtual system syslogs service log from the log host of the public system.

    info-center loghost vsys-to-public enable

    If the FW has multiple virtual systems, it needs to use multiple interfaces to send syslogs service log. If the interfaces are insufficient, configure multiple routes to the public system. Then run the info-center loghost vsys-to-public enable command to enable the function of sending the logs of all virtual systems to the log host of the public system.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
Next topic >