AudioCodes Mediant 600 - Page 564

SIP User's Manual 564 Document #: LTRT-83310
Mediant 600 & Mediant 1000
Parameter Description
parameter EnableSyslog is set to 1).
Web/EMS: CDR Report
Level
[CDRReportLevel]
Determines whether Call Detail Records (CDR) are sent to the Syslog
server and when they are sent.
 [0] None = CDRs are not used (default).
 [1] End Call = CDR is sent to the Syslog server at the end of each
call.
 [2] Start & End Call = CDR report is sent to Syslog at the start and
end of each call.
 [3] Connect & End Call = CDR report is sent to Syslog at
connection and at the end of each call.
 [4] Start & End & Connect Call = CDR report is sent to Syslog at the
start, at connection, and at the end of each call.
Notes:

The CDR Syslog message complies with RFC 3161 and is identified
by: Facility = 17 (local1) and Severity = 6 (Informational).
 This mechanism is active only when Syslog is enabled (i.e., the
parameter EnableSyslog is set to 1).
Web/EMS: Debug Level
[GwDebugLevel]
Defines the Syslog debug logging level.
 [0] 0 (default) = Debug is disabled.
 [1] 1 = Flow debugging is enabled.
 [5] 5 = Flow, device interface, stack interface, session manager,
and device interface expanded debugging are enabled.
 [7] 7 = This option is recommended when the device is running
under "heavy" traffic. In this mode:

The Syslog debug level automatically changes between level 5,
level 1, and level 0, depending on the device's CPU
consumption so that VoIP traffic isn’t affected.

Syslog messages are bundled into a single UDP packet, after
which they are sent to a Syslog server (bundling size is
determined by the MaxBundleSyslogLength parameter).
Bundling reduces the number of UDP Syslog packets, thereby
improving CPU utilization.
Note that when this option is used, in order to read Syslog
messages with Wireshark, a special plug-in (i.e., acsyslog.dll) must
be used. Once the plug-in is installed, the Syslog messages are
decoded as "AC SYSLOG" and are dispalyed using the ‘acsyslog’
filter instead of the regular ‘syslog’ filter.
Notes:
 This parameter is typically set to 5 if debug traces are required.
However, in cases of heavy traffic, option 7 is recommended.
 Options 2, 3, 4, and 6 are not recommended.
Syslog Facility Number
[SyslogFacility]
Defines the Facility level (0 through 7) of the device’s Syslog
messages, according to RFC 3164. This allows you to identify Syslog
messages generated by the device. This is useful, for example, if you
collect the device’s and other equipments’ Syslog messages, at one
single server. The device’s Syslog messages can easily be identified
and distinguished from other Syslog messages by its Facility level.
Therefore, in addition to filtering Syslog messages according to IP
address, the messages can be filtered according to Facility level.
 [16] = local use 0 (local0) - default
 [17] = local use 1 (local1)