Logging trap controls forwarding Cisco IOS log messages to a central Syslog server. The command is enabled by default, but forwarding requires a configured server address. section 7.1.3 section 7.3
Configure and interpret the feature with these exam-relevant facts:
- Configure `logging trap [severity]` to set the maximum numerical severity forwarded; the selected level and all numerically lower, more severe levels are included. section 7.2.2
- Configure `logging host ip-address` or `logging ip-address` to identify the Syslog server; the running configuration uses the `logging host` form. section 7.1.3
- Use `show logging` to verify trap logging and its threshold. The default is informational, severity 6, so debugging messages at level 7 are excluded. section 7.2.2
- Standard Syslog sends messages to UDP port 514; Syslog over TLS uses TCP port 6514. section 7.1.3
Basic configuration
Router(config)# logging trap warnings Router(config)# logging host 192.0.2.10 Router(config)# do show logging Trap logging: level warnings This forwards warning-level events, severity 4, and all more severe events to the specified server. section 7.2.2 section 7.1.3
