Skip to main content

Textual Conventions for Syslog Management
RFC 5427

Revision differences

Document history

Date Rev. By Action
2015-10-14
08 (System) Notify list changed from syslog-chairs@ietf.org, draft-ietf-syslog-tc-mib@ietf.org to (None)
2012-08-22
08 (System) post-migration administrative database adjustment to the Yes position for Jari Arkko
2009-04-01
08 Cindy Morgan State Changes to RFC Published from RFC Ed Queue by Cindy Morgan
2009-04-01
08 Cindy Morgan [Note]: 'RFC 5427' added by Cindy Morgan
2009-03-31
08 (System) RFC published
2008-06-11
08 (System) IANA Action state changed to RFC-Ed-Ack from Waiting on RFC Editor
2008-06-10
08 (System) IANA Action state changed to Waiting on RFC Editor from In Progress
2008-06-10
08 (System) IANA Action state changed to In Progress from Waiting on Authors
2008-06-09
08 Cindy Morgan State Changes to RFC Ed Queue from Approved-announcement sent by Cindy Morgan
2008-06-09
08 (System) IANA Action state changed to Waiting on Authors from In Progress
2008-06-09
08 (System) IANA Action state changed to In Progress
2008-06-09
08 Amy Vezza IESG state changed to Approved-announcement sent
2008-06-09
08 Amy Vezza IESG has approved the document
2008-06-09
08 Amy Vezza Closed "Approve" ballot
2008-06-06
08 (System) Removed from agenda for telechat - 2008-06-05
2008-06-05
08 Cindy Morgan State Changes to Approved-announcement to be sent from IESG Evaluation by Cindy Morgan
2008-06-05
08 Jari Arkko [Ballot Position Update] Position for Jari Arkko has been changed to Yes from Discuss by Jari Arkko
2008-06-05
08 Mark Townsley [Ballot Position Update] New position, No Objection, has been recorded by Mark Townsley
2008-06-04
08 Jon Peterson [Ballot Position Update] New position, No Objection, has been recorded by Jon Peterson
2008-06-04
08 Cullen Jennings [Ballot Position Update] New position, No Objection, has been recorded by Cullen Jennings
2008-06-04
08 Lars Eggert [Ballot Position Update] New position, No Objection, has been recorded by Lars Eggert
2008-06-04
08 Ross Callon [Ballot Position Update] New position, No Objection, has been recorded by Ross Callon
2008-06-04
08 Tim Polk [Ballot Position Update] New position, No Objection, has been recorded by Tim Polk
2008-06-03
08 Chris Newman [Ballot Position Update] New position, No Objection, has been recorded by Chris Newman
2008-06-03
08 Lisa Dusseault [Ballot Position Update] New position, No Objection, has been recorded by Lisa Dusseault
2008-06-03
08 David Ward [Ballot Position Update] New position, No Objection, has been recorded by David Ward
2008-06-03
08 Ron Bonica [Ballot Position Update] New position, Yes, has been recorded by Ron Bonica
2008-06-03
08 Russ Housley [Ballot Position Update] New position, No Objection, has been recorded by Russ Housley
2008-06-02
08 Jari Arkko
[Ballot discuss]
The object SyslogFacility has a MUST requirement that may be
ambiguous:

  The mapping specified here MUST be used in SNMP contexts,
  …
[Ballot discuss]
The object SyslogFacility has a MUST requirement that may be
ambiguous:

  The mapping specified here MUST be used in SNMP contexts,
  even though a particular syslog implementation would use
  a different mapping.

Does this mean that an implementation may ignore the mapping
if it so pleases? But why have a MUST then? Or does this mean
that in the SNMP user interface you MUST use this mapping, even
if your syslog API and log files use a different mapping? I
think you mean the latter.

Here is what I would suggest as a reformulation:

  The mapping specified here MUST be used in MIBs and SNMP user
  interfaces. A particular syslog implementation MAY use different
  mappings in other interfaces, however.
2008-06-02
08 Jari Arkko [Ballot Position Update] New position, Discuss, has been recorded by Jari Arkko
2008-06-02
08 Jari Arkko
[Ballot comment]
Why does the following text mix numbers and names in listing the
Facilities? Does cron mean cron(9) or also cron2(15)?

  In particular, …
[Ballot comment]
Why does the following text mix numbers and names in listing the
Facilities? Does cron mean cron(9) or also cron2(15)?

  In particular, the labels corresponding to Facility codes 4,
  10, 13, and 14, and the code corresponding to the Facility
  label 'cron' are known to vary across different operating
  systems.
2008-06-02
08 Magnus Westerlund [Ballot Position Update] New position, No Objection, has been recorded by Magnus Westerlund
2008-05-28
08 Dan Romascanu [Ballot Position Update] New position, Yes, has been recorded by Dan Romascanu
2008-05-22
08 Pasi Eronen Placed on agenda for telechat - 2008-06-05 by Pasi Eronen
2008-05-22
08 Pasi Eronen State Changes to IESG Evaluation from Waiting for AD Go-Ahead::AD Followup by Pasi Eronen
2008-05-22
08 Pasi Eronen [Ballot Position Update] New position, Yes, has been recorded for Pasi Eronen
2008-05-22
08 Pasi Eronen Ballot has been issued by Pasi Eronen
2008-05-22
08 Pasi Eronen Created "Approve" ballot
2008-05-22
08 (System) Sub state has been changed to AD Follow up from New Id Needed
2008-05-22
08 (System) New version available: draft-ietf-syslog-tc-mib-08.txt
2008-05-20
08 Pasi Eronen State Changes to Waiting for AD Go-Ahead::Revised ID Needed from Waiting for AD Go-Ahead by Pasi Eronen
2008-05-16
08 (System) State has been changed to Waiting for AD Go-Ahead from In Last Call by system
2008-05-09
08 Amanda Baber
IANA Last Call comments:

Upon approval of this document, the IANA will make the following
assignment in the "Network Management Parameters" registry at
http://www.iana.org/assignments/smi-numbers
Sub-registry: …
IANA Last Call comments:

Upon approval of this document, the IANA will make the following
assignment in the "Network Management Parameters" registry at
http://www.iana.org/assignments/smi-numbers
Sub-registry: "Prefix: iso.org.dod.internet.mgmt.mib-2 (1.3.6.1.2.1)"

Decimal  Name        Description                References
-------  -----------  -----------                ----------
TBD      syslogTCMIB  Syslog Textual Conventions  [RFC-ietf-syslog-tc-mib-07.txt]

We understand the above to be the only IANA Action for this document.
2008-05-02
08 Samuel Weiler Request for Last Call review by SECDIR is assigned to Susan Thomson
2008-05-02
08 Samuel Weiler Request for Last Call review by SECDIR is assigned to Susan Thomson
2008-05-02
08 Cindy Morgan Last call sent
2008-05-02
08 Cindy Morgan State Changes to In Last Call from Last Call Requested by Cindy Morgan
2008-05-02
08 Pasi Eronen State Changes to Last Call Requested from AD Evaluation::External Party by Pasi Eronen
2008-05-02
08 Pasi Eronen Last Call was requested by Pasi Eronen
2008-05-02
08 (System) Ballot writeup text was added
2008-05-02
08 (System) Last call text was added
2008-05-02
08 (System) Ballot approval text was added
2008-04-30
08 Pasi Eronen State Changes to AD Evaluation::External Party from AD Evaluation by Pasi Eronen
2008-04-30
07 (System) New version available: draft-ietf-syslog-tc-mib-07.txt
2008-04-02
08 Pasi Eronen State Changes to AD Evaluation from Publication Requested by Pasi Eronen
2008-03-18
08 Pasi Eronen Responsible AD has been changed to Pasi Eronen from Sam Hartman
2008-02-13
06 (System) New version available: draft-ietf-syslog-tc-mib-06.txt
2008-01-21
05 (System) New version available: draft-ietf-syslog-tc-mib-05.txt
2008-01-04
08 Dinara Suleymanova
PROTO Write-up

1.a) Have the chairs personally reviewed this version of
the Internet Draft (ID), and in particular, do they believe this
ID is ready …
PROTO Write-up

1.a) Have the chairs personally reviewed this version of
the Internet Draft (ID), and in particular, do they believe this
ID is ready to forward to the IESG for publication?

Yes.


1.b) Has the document had adequate review from both key WG
members and key non-WG members? Do you have any concerns about the
depth or breadth of the reviews that have been performed?

Adequate review has occurred from WG members, and it has been
reviewed by others. I am satisfied about the level of review.

It passes IDnits.
The document meets the guidelines of RFC4181 for MIB documents.
It passes libsmi MIB validation.
The security considerations is appropriate to documents containing only TCs.


1.c) Do you have concerns that the document needs more
review from a particular (broader) perspective (e.g., security,
operational complexity, someone familiar with AAA, etc.)?

No. Dan Romascanu has agreed to perform a MIB Doctor review.


1.d) Do you have any specific concerns/issues with this
document that you believe the ADs and/or IESG should be aware of? For
example, perhaps you are uncomfortable with certain parts of the
document, or have concerns whether there really is a need for it.
In any event, if your issues have been discussed in the WG
and the WG has indicated it that it still wishes to advance the
document, detail those concerns in the write-up.

No.

The ADs should be aware that syslog is a defacto standard widely used in the industry, and supported by standard POSIX APIs. The syslog WG discussed whether to standardize the use of the labels in the facilities TC. WG consensus is that the labels are normative, but irrelevant.
The chairs are comfortable with this decision.

The following text is included in the document, with references, and the MIB module itself, without references, to explain what this means.

" For interoperability and backwards compatibility reasons, the mapping
specified in this document between a label which represents a
Facility or a Severity, and the value which represents the
corresponding code, is normative. So the mapping from a label
configured by operators in syslog.conf or equivalent will
consistently map to the same Facility code regardless of
implementation, but the label itself is often semantically
meaningless, because it is impractical to attempt to enumerate all
possible facilities, and the mapping (label and corresponding value)
that is used for an actual facility is, and has historically been,
implementation-dependent.

For example, the foobar application might log messages as having come
from local7, even though there is no "local" process on the device,
and the operator can configure syslog.conf to have local7.critical
messages be relayed, even though there might be multiple facilities
using Facility local7. This is typical current practice, and
originators, relays and collectors know how to handle this situation.
For improved accuracy, the foobar application can also include an
APPNAME Structured Data Element [RFCPROT]."



1.e) How solid is the WG consensus behind this document? Does it
represent the strong concurrence of a few individuals, with
others being silent, or does the WG as a whole understand and
agree with it?

The WG cares little about having MIB support. There is strong consensus to publish this document from those WG members who want MIB support, from the MIB Doctors, and from other WGs who are developing syslog-related MIB modules, so there will be consistency in the definition of MIB objects representing Facility and Severity.


1.f) Has anyone threatened an appeal or otherwise indicated extreme
discontent? If so, please summarise the areas of conflict in
separate email to the Responsible Area Director.

No.


1.g) Have the chairs verified that the document adheres
to all of the ID nits? (see http://www.ietf.org/ID-Checklist.html).

Yes.


1.h) Is the document split into normative and informative
references? Are there normative references to IDs, where the IDs are
not also ready for advancement or are otherwise in an unclear state?
(note here that the RFC editor will not publish an RFC with
normative references to IDs, it will delay publication until all
such IDs are also ready for publication as RFCs.)

Yes, it is split.
draft-ietf-syslog-protocol has already been approved for advancement.

1.ijk) Write-up section:

* Technical Summary

This document contains a MIB module that defines textual conventions to represent facility and severity information commonly used in syslog messages. The intent is that these textual conventions will be imported and used in MIB modules that would otherwise define their own representations.

* Working Group Summary

The consensus of the working group was to publish this as a
standards-track document.

* Protocol Quality

These textual conventions standardize MIB representation of facility and severity, concepts which are widely used in existing implementations of syslog.
2008-01-04
08 Dinara Suleymanova Draft Added by Dinara Suleymanova in state Publication Requested
2007-12-04
04 (System) New version available: draft-ietf-syslog-tc-mib-04.txt
2007-12-03
03 (System) New version available: draft-ietf-syslog-tc-mib-03.txt
2007-07-09
02 (System) New version available: draft-ietf-syslog-tc-mib-02.txt
2007-06-12
01 (System) New version available: draft-ietf-syslog-tc-mib-01.txt
2007-05-22
00 (System) New version available: draft-ietf-syslog-tc-mib-00.txt