If a notice-level message is sent to a syslog server, which event has occurred?
If a notice-level message is sent to a syslog server, which event has occurred?
A notice-level message in syslog, which is severity level 5, indicates an informational condition that is significant but not severe. Examples of events that might generate notice-level messages include system state changes such as a network device restarting or an interface status changing. Given these examples, a network device restarting is a significant event that falls under this description. Therefore, the correct answer is that a network device has restarted.
A is the right answer
C is the correct answer. A routing instance is a collection of routing tables, interfaces, and routing protocol parameters. C states that it's A routing instance, which means it only happens to a single subject. Flapping does not mean the interface going up and down multiple times in very short period, I don't know where that definition came from, it means the instance went through a down-up cycle(s). The whole device restarted is much worse than a single instance flapped, all the config that's not in the start-up config can be wiped out.
Routing instance refers to the OSPF process, as in EIGRP or BGP they use Autonomous System (AS), which are similar to OSPF areas. Below, a deliberate failure was created in the OSPF adjacency with hello mishmash, with this we can see that we received logging messages level 5 Notice, referring to the failure in the routing instance of Process 10. R3(config-if)#ip ospf hello-interval 20 %OSPF-5-ADJCHG: Process 10, Nbr 10.23.0.2 on GigabitEthernet0/1 from FULL to DOWN, Neighbor Down: Dead timer expired. %OSPF-5-ADJCHG: Process 10, Nbr 10.23.0.2 on GigabitEthernet0/1 from FULL to DOWN, Neighbor Down: Interface down or detached.
And even, instead of changing the hello-interval, we turn off this interface, also we receive the message: %OSPF-5-ADJCHG: Process 10, Nbr 10.23.0.2 on GigabitEthernet0/1 from FULL to DOWN, Neighbor Down: Interface down or detached. (Process 10 routing instance failed.) So answer C is correct, as this level 5 message (notice) can be forwarded to the Syslog server via SNMP.
But this is a tricky question, because also when we restart a network device, the devices connected to it publish a notice-level message (level 5) that can be forwarded to the Syslog Server via SNMP: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to down. However, this message indicates an interruption in the connectivity of the interface, and we cannot say with this message alone that a network device has been restarted, there are also other reasons for this message, such as cable disconnection or port turned off. And in the exercise it is questioned what “occurred” only with “notice-level message”, and not what could have happened. And when an OSPF process fails (routing instance adjacency down) - we know with 100% certainty what “occurred”, a routing instance has flapped.
I would say C, e.g. an adjacency change generates a notification level (5) message. %OSPF-5-ADJCHG: Process 1, Nbr 192.168.12.2 on FastEthernet0/0 from LOADING to FULL, Loading Done https://networklessons.com/ospf/troubleshooting-ospf-neighbor-adjacency
I believe they wait for answer C, and I believe the C is correct. I vote for C to rise the % of C.
A is the right answer
notice level means the router is flapping. it's all that matters to pass to test
Going with A because notice level is not a biggie
This is an old source but still from Cisco, and it says "The Notice level displays interface up or down transitions and system restart messages." https://www.ciscopress.com/articles/article.asp?p=426638&seqNum=3
"Interface up or down transitions and system restart messages, displayed at the notifications level: this message is only for information; access point functionality is not affected." https://www.cisco.com/c/en/us/td/docs/routers/access/wireless/software/guide/SysMsgLogging.html
I meant to vote for A. Lol.
Interface up or down transitions and system restart messages, displayed at the notifications level: this message is only for information.
A is true
a because the notice level for max reason reboot the device
Answer is A and NOT C since routing protocol sys-logging send Alert syslog messages (Level 1)
ospf have level 5 syslog but also 4... https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/6154-19.html
sorry im wrong https://www.cisco.com/en/US/docs/security/asa/asa80/system/message/logmsgs.pdf you can try on PT ... conect 2 router and off/on ... no syslog
so c is correct
C is correct
Correct is C , not A because the level of severity would be Alert or Critical , Notice level is level 5 important notice but not critical to the system . A would be critical to the system .