Siemens SIMATIC CloudConnect CC7 Series - Syslog Messages; Structure of the Messages

SIMATIC CC7
Operating Instructions, 10/2019, C79000-G8976-C503-02
141
Syslog messages
C
Security events
The gateway outputs Syslog messages according to RFC 5424. The messages are based
on IEC 62443-3-3.
C.1 Structure of the messages
C.1.1 Structure of the Syslog messages
Syslog messages record changes in device states as status information. Syslog messages
according to RFC 5424 or RFC 5426 are output by devices and transferred to a server via
the set UDP port (standard: 514). The Syslog server collects the information of the devices
and informs you about these events.
The Syslog protocol prescribes a fixed sequence and structure of the possible parameters.
Syslog messages according to RFC5424 have the following structure:
Part / Parameter
Explanation
HEADER
PRI Priority of the Syslog message, divided into:
• Severity (Severity)
Possible values:
– 0 Emergency
– 1 Alert
– 2 Critical
– 3 Error
– 4 Warning
– 5 Notice
– 6 Information
– 7 Debug
• Facility (Origin)
Possible values, e.g.: Sub-system, service, user
VERSION
Version number of the Syslog specification
TIMESTAMP Time stamp of the device as local time including time zone and correction for daylight sav-
ing/standard time
Format: YYYY-MM-DDThh:mm:ss.msmsmsms+xx:yy
Example: 2010-01-01T02:03:15.0003+02:00