Concentrator syslog message identifiers - Do they mean anything?

Hi,
Got a 3020 running 4.1.7E and when logging to syslog I'm getting 'words' such as %IKE-5-119 or %AUTH-6-41
Going on my Pix logs, when I get something after the the time/date and preceded by a % (such as %PIX-6-302015) it means something I can look up.
I have searched cisco and google in vain for these VPN Concentrator syslog msg identifiers.
If they don't mean anything why are they there? They aren't random as the same type of message has the same identifier.
Pls can someone put my mind to rest on this one.
Regards,
MikeS

For the log message type, check:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_guide_chapter09186a00803ee0b1.html#wp1000333
Check the Even class and Syslog Data and Formats (for log with and without %)
HTH
AK

Similar Messages

  • ITunes Error messages and what they mean

    Hello,
    I like to download Podcasts and I enjoy listening to some of them during my down time. But sometimes I get errors such as err = -3259 or err = -3252 but there is no place that I have found to tell what these error codes mean?
    What should I do when I get these errors, and where could I go to find the meaning of these error codes?
    Thanks a million.
    Waseem

    There's an explanation of what a bunch of the codes relate-to/are-caused-by in the *Specific Conditions and Alert Messages* section of the following document:
    [iTunes: Troubleshooting iTunes Store on your computer, iPhone, iPad, or iPod|http://support.apple.com/kb/TS3297]
    Your two typically indicate security software trouble, although it's a bit odd that you're only getting them intermittently ... are they always cropping up on some podcasts but not on others?

  • Console messages- What do they mean?

    8/31/10 11:28:15 PM [0x0-0x4b04b].net.urbanterror.www[337] back4fight was on the wrong end of Shahriar's G36.
    8/31/10 11:28:15 PM [0x0-0x4b04b].net.urbanterror.www[337] You hit mush in the Arms for 11% damage.
    8/31/10 11:28:15 PM [0x0-0x4b04b].net.urbanterror.www[337] mush got shredded to pieces by Mrfickensie's Negev
    8/31/10 11:28:16 PM [0x0-0x4b04b].net.urbanterror.www[337] console: ^0(^2|WC|Bot^0)^7: Shahriar is on a killing spree (5 kills in a row)
    9/1/10 12:08:45 AM com.apple.launchd.peruser.501[87] (com.apple.ReportCrash) Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self
    9/1/10 12:08:48 AM com.apple.fontd[99] FODBError: FODBReconcileWithAuxFile called: kAuxFileHeadersDontMatchErr
    9/1/10 12:08:54 AM com.apple.launchd.peruser.501[87] (com.apple.Kerberos.renew.plist[111]) Exited with exit code: 1
    9/1/10 12:08:56 AM com.apple.launchd.peruser.501[87] ([email protected][114]) Exited with exit code: 1
    9/1/10 12:10:28 AM com.apple.launchd.peruser.501[87] ([0x0-0x11011].com.apple.Safari[127]) Exited: Terminated
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorFailure: Set a breakpoint @ CGErrorBreakpoint() to catch errors as they are logged.
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowTransformsAtPlacement: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowListSystemLevel: Failed
    9/1/10 12:10:28 AM com.apple.Dock.agent[91] Wed Sep 1 00:10:28 amartinezs-iMac.local Dock[91] <Error>: kCGErrorIllegalArgument: CGSSetWindowListSystemLevel: Failed

    If you mean the slew of "illegal argument" errors, they're coming from the Dock application. Try removing the files ~/Library/Preferences/com.apple.dock.*, then relaunch the Dock.

  • Rsyncd messages - what do they mean?

    Hi!
    Can't find a guide on how to read rsyncd log messages anywhere. Like p.e. many:
    cd+++++++++ [/folder/]
    and then at the end
    sent [many] bytes received [many] bytes [insane amount of] bytes/sec
    That confuses me, because nothing should have sent / received anything at that time and there's not even something here that could do it that fast (the machine the drive is attached to shouldn't even be able to read/write that fast from its own hd). Did I miss some important pages of the manual?
    Thx!

    No, I can't say anything is 'bad' at all
    I guess I'm becoming neurotic about virus's.
    I worry that the spam I get is somehow generated from something setup in my Mac via visiting web sites or receiving emails.
    I have ClamXav, Norton AntiVirus (the BIG Virus ) and iAntiVirus running, but I still wonder...

  • Safari system.log messages - what do they mean?

    hey could use any help regarding some messages i received in BOTH console.log and system.log regarding Safari:
    Oct 31 20:01:23 nicks-Computer /Applications/Safari.app/Contents/MacOS/Safari: * Warning: ATSUSetFontFallbacks has been deprecated. Use ATSUFontFallbacks objects instead. *
    Oct 31 21:55:06 nicks-Computer /Applications/Safari.app/Contents/MacOS/Safari: * Warning: Line option kATSLineIsDisplayOnly has been deprecated. *
    any help? thanks,
    imac g4   Mac OS X (10.3.9)   have 5th generation ipod

    Doesn't affect the User. More for developer information. I guess one of those things that ought to be hidden from the non-developers view.

  • Text messages - what do they mean?

    ive received two texts from PayPal (maybe?) in the last two days asking me to send back a "code"or enter on the website. I don't know what this is indicating - is someone trying to reset my password or is it something else? Thanks!

    Have you recently added a card or bank account to your paypal account?If so could it be the code to verify those?              ********************************************** I give up my time to help you so a thank you or kudos would be cool.
    Marking one of my replies as a solution would be appreciated if I sorted your problem.

  • Snmp trap versus syslog message

    Hi,
    Most network devices will send snmp traps and syslog messages to a central server.
    For analyzing purpose this server runs software to display the messages or traps.
    My question is, what is the difference between syslog messages and snmp traps?
    What is best practise?
    Thank you very much.
    Hansruedi

    From the very basic level, traps and syslog differ in the encoding.  Syslog messages are typically text messages sent within a UDP packet.  There is a bit of binary encoding to indicate the syslog facility and severity.  SNMP traps have encoded ASN.1 fields (called variable bindings).  These varbinds are not ASCII text like syslog messages.  Instead they are encoded object identifiers that can be translated into object names using MIB definitions.
    More syslog messages exist than SNMP traps because syslog messages do not have as much governance associated with them.  However, we typically recommend that customers enable both as there are some details available in traps that you may not get in syslog messages.  Traps can also be processed in a more programmatic fashion because of the documentation that goes into the MIBs that define them.

  • In iMessage do the different colours of message mean anything?

    In iMessage do the different colours of message mean anything?

    iMessages can be sent between Apple devices like iPhone, iPod, iPad, Macs. They are free of charge if connected to Wi-Fi and use your data plan if Wi-Fi is not available.
    If the other person does not have an Apple device, those messages are sent as text, depending on your contract you might have a certain number of free messages to send or your carrier will not charge you for sending.
    If an iMessage can't be sent, your iPhone will try to send it as "normal" text message, this setting can be changed in Settings/Messages on your phone.
    Messages lets you exchange text messages with other SMS and MMS devices using your cellular connection, and with other iOS devices using iMessage.
    iMessage is an Apple service that lets you send unlimited messages over Wi-Fi (or cellular connections) to others using iOS 5 or later, or OS X Mountain Lion or later. With iMessage, you can see when other people are typing, and let them know when you’ve read their messages. iMessages are displayed on all of your iOS devices logged in to the same account, so you can start a conversation on one of your devices and continue it on another device. For security, iMessages are encrypted before they’re sent.
    copied from page 66 of the iphone_user_guide

  • Error message has just occurred... This copy of itunes is corrupted. Please reinstall itunes. I'm using a Macbook operating on version 10.6.8 - not that this means anything to me. I just want to preserve my library and playlists! What do I do?!

    Error message has just occurred... This copy of itunes is corrupted. Please reinstall itunes. I'm using a Macbook operating on version 10.6.8 - not that this means anything to me. I just want to preserve my library and playlists! What do I do?!

    Let's try a repair install of iTunes.
    Restart the PC first.
    If you're using Vista or 7, now head into your Uninstall a program control panel, select "iTunes" and then click "Repair".
    If you're using XP, head into your Add or Remove Programs control panel, select "iTunes", and click "Change". Select "Repair" and click "Next" as per the following screenshot:
    Can you launch your iTunes now?

  • SQL Loader Messages in Java (What do they mean?)

    Hi,
    I have been able to execute SQL Loader from a Servlet and I have also been able to retrieve the exit code by calling
    {returnCode = process.waitFor()}.
    I know that a "0" in the exit code indicates a successful execution. However what do the values larger than "0" mean? Does anyone know where I can find out more about these messages.? My servlet container is WebLogic 7.1 on Windows 2000.
    Thanks,
    Jimmy

    indeed it was. no one mentioned a region pitch number, but that doesn't mean anything, of course, people fail to mention all kinds of important bits.
    Still the OP said he just dropped a loop in the timeline.
    ::shrug:: i dunno

  • JBoss Warnings - What do they mean?

    I am getting a bunch of warnings and I don't know if it's bad and/or how to fix it. For example, it says it can't find JTA - does this mean I won't be able to do transactions?!
    THE WARNINGS:
    20:56:57,934 WARN [MainDeployer] The manifest entry in file:/D:/Apps/jboss/server/default/lib/xalan.jar references URL file:/D:/Apps/jboss/server/default/lib/jaxp.jar which could not be opened, entry ignored
    20:56:57,944 WARN [MainDeployer] The manifest entry in file:/D:/Apps/jboss/server/default/lib/xalan.jar references URL file:/D:/Apps/jboss/server/default/lib/xerces.jar which could not be opened, entry ignored
    20:56:57,954 WARN [MainDeployer] The manifest entry in file:/D:/Apps/jboss/server/default/lib/xalan.jar references URL file:/D:/Apps/jboss/server/default/lib/crimson.jar which could not be opened, entry ignored
    20:57:00,808 WARN [MainDeployer] The manifest entry in file:/D:/Apps/jboss/server/default/lib/castor.jar references URL file:/D:/Apps/jboss/server/default/lib/xerces.jar, which could not be opened, entry ignored
    20:57:00,838 WARN [MainDeployer] The manifest entry in file:/D:/Apps/jboss/server/default/lib/castor.jar references URL file:/D:/Apps/jboss/server/default/lib/jdbc-se2.0.jar, which could not be opened, entry ignored
    20:57:00,848 WARN [MainDeployer] The manifest entry in file:/D:/Apps/jboss/server/default/lib/castor.jar references URL file:/D:/Apps/jboss/server/default/lib/jndi.jar, which could not be opened, entry ignored
    20:57:00,858 WARN [MainDeployer] The manifest entry in file:/D:/Apps/jboss/server/default/lib/castor.jar references URL file:/D:/Apps/jboss/server/default/lib/jta1.0.1.jar which could not be opened, entry ignored
    20:57:06,306 WARN [ServiceController] jboss.management.single:j2eeType=J2EEDomain,name=Manager does not implement any Service methods
    20:57:06,376 WARN [ServiceController] jboss:service=XidFactory does not implement any Service methods
    20:57:09,260 WARN [MainDeployer] The manifest entry in file:/D:/Apps/jboss/server/default/deploy/jbossweb.sar/org.mortbay.jetty.jar references URL file:/D:/Apps/jboss/server/default/deploy/jbossweb.sar/javax.servlet.jar which could not be opened, entry ignored
    20:57:09,270 WARN [MainDeployer] The manifest entry in file:/D:/Apps/jboss/server/default/deploy/jbossweb.sar/org.mortbay.jetty.jar references URL file:/D:/Apps/jboss/server/default/deploy/ext/com.sun.net.ssl.jar which could not be opened, entry ignored
    20:57:14,287 WARN [ServiceController] jboss.jca:service=LocalTxDS,name=hsqldbDS does not implement any Service methods
    20:57:14,317 WARN [ServiceController] jboss.jca:service=LocalTxDS,name=hsqldbDS does not implement any Service methods
    20:57:16,901 WARN [ServiceController] jboss.jca:service=XaTxDS,name=jmsra does not implement any Service methods
    20:57:17,572 WARN [ServiceController] jboss.jca:service=LocalTxDS,name=MSSQLDS does not implement any Service methods
    20:57:17,702 WARN [ServiceController] jboss.jca:service=XATxDS,name=MSSQLXaDS does not implement any Service methods
    20:57:18,524 WARN [ServiceController] jboss.jca:service=RARDeployment,name=JBoss LocalTransaction JDBC Wrapper does not implement any Service methods
    20:57:18,544 WARN [ServiceController] jboss.jca:service=LocalTxDS,name=hsqldbDS does not implement any Service methods
    20:57:18,894 WARN [ServiceController] jboss.jca:service=LocalTxDS,name=MSSQLDS does not implement any Service methods
    20:57:19,305 WARN [ServiceController] jboss.jca:service=RARDeployment,name=Minerva JDBC XATransaction ResourceAdapter does not implement any Service methods
    20:57:19,315 WARN [ServiceController] jboss.jca:service=XATxDS,name=MSSQLXaDS does not implement any Service methods
    20:57:19,635 WARN [ServiceController] jboss.jca:service=RARDeployment,name=JMS Adapter does not implement any Service methods
    20:57:19,645 WARN [ServiceController] jboss.jca:service=XaTxDS,name=jmsra does not implement any Service methods
    I know that's alot of WARNS, but what do they all mean? Just for a bit more info (taking the first WARN as an example), Xerces did not exits in this folder. Why is this? And why is it asking for it? I just installed JBoss 3.0.x and then hit run.bat. Anyone know what's going on here?
    Thanks in advance!
    Robert

    I know it's alot of WARN messages, but they fall into two categories:
    1. Jar file not found
    2. Something does not implement any Service methods
    The first one I'm confused as to why I'd get it because I installed JBoss and didn't alter ANYTHING, yet I get those messages. So it means that they didn't include some jars that it needs. Why? What does it mean?
    The second one, I'm also wondering if it's just a useless warning, or is there something I need to do to make these things hook up?

  • Unable to stop syslog messages

    I keep getting the following syslog messages to my syslog server from our CUPS:-
    "133161: Jul 10 2013 09:32:21.387 UTC : %UC_RTMT-2-RTMT_ALERT: %[Name=CriticalServiceDown][Detail= Service operational status is DOWN.<010>Cisco UP XCP Message Archiver,Cisco UP XCP XMPP Federation Connection Manager.<010>The alert is generated on Wed Jul 10 10:32:21 BST 2013 on node 10.210.1.30.][App ID=Cisco AMC Service][Cluster ID=][Node ID=VOIP-TDC-CUPS-PUB-030]: RTMT Alert"
    The Cisco UP XCP Message Archiver service and the Cisco UP XCP XMPP Federation Connection Manager service are both activated, but both stopped. I have tried turning off any kind of alarm and trace config for both services but nothing seems to make any difference!!
    Any ideas?
    thanks

    By disabled Ryan is referring to Service Activation. As long as the service is activated, it will attempt to start periodically. Both of these services require specific configuration before they will run.
    Please remember to rate helpful responses and identify helpful or correct answers.

  • Error - EVENT ID 4353  Mean anything to anyone?

    Wondering if this means anything to anyone.  I am not the developer and the developer says they "shouldnt matter"  I have a feeling this may be causing some issues with printing reports to a label printer
    Event Type:     Error
    Event Source:     Crystal Reports
    Event Category:     None
    Event ID:     4353
    Date:          8/19/2008
    Time:          4:30:05 PM
    User:          N/A
    Computer:     FVEGA
    Description:
    The description for Event ID ( 4353 ) in Source ( Crystal Reports ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: The keycode retrieved from the registry is invalid.

    I have several issues....
    When I select reports I am coming up with a communications error.
    I recieve the following event id's but I am unable to find out what they meen.
    34200
    35602
    34400
    35302
    My investigation leads me to believe it is an issue with the Registry or the Registry Key.
    Can anyone let me know what these event id's mean?

  • What do they mean Early Mac? about graphic card update.

    What do they mean Early Mac?
    I want to buy ati radeon hd 4870.
    I bought this machine and I can not find the papers anymore.
    Model Name: Mac Pro
    Model Identifier: MacPro1,1
    Processor Name: Dual-Core Intel Xeon
    Processor Speed: 2 GHz
    Number Of Processors: 2
    Total Number Of Cores: 4
    L2 Cache (per processor): 4 MB
    Memory: 8 GB
    *Type: DDR2 FB-DIMM*
    *Speed: 667 MHz*
    Bus Speed: 1.33 GHz
    On mac website they write about the upgrade.
    Compatibility:
    Requires Mac Pro (Early 2009 with 1066MHz DDR3 memory) or Mac Pro (Early 2008 with *800MHz DDR2 FB-DIMM memory*) with PCI Express 2.0 slot
    will the card work on my mac???
    If not what are my other options as I have not so great NVIDIA GeForce 7300 GT 256MB

    It is only when you get to the bottom, and that you want to PLAY GAMES that it is possible to answer.
    Having 7300GT is worthless, unless to use 3rd monitor.
    Only Windows has better Nvidia graphics and drivers for games. And if you run Windows, you can use PC card and leave the 7300GT for OS X alone.
    http://www.barefeats.com/harper17.html
    or
    http://www.barefeats.com/harper15.html
    and
    http://www.barefeats.com/harper11.html
    Even last year you could use 4870 in Vista, just not in OS X
    http://www.barefeats.com/harper19.html
    http://www.anandtech.com/video/showdoc.aspx?i=3415

  • LMS 4.2 not processing syslog messages

    I have a new install of LMS 4.2 on a virtual appliance.  No syslog messages are getting into LMS.  They are being received by the server, but are showing up in /var/adm/CSCOpx/log/dmgtd.log, and aren't getting processed by SyslogAnalyser.
    Here's the syslog.conf file:
         local6.info                                                                     /var/log/ade/ADE.log
         *.info;mail.none;news.none;authpriv.none;cron.none;local0.none;local1.none      /var/log/messages
         authpriv.*                                                                      /var/log/secure
         mail.*                                                                          -/var/log/maillog
         cron.*                                                                          /var/log/cron
         *.emerg                                                                         *
         uucp,news.crit                                                                  /var/log/spooler
         local7.*                                                                        /var/log/boot.log
         #Application LMS Generated config
         #BEGIN CSCOmd - DO NOT EDIT THESE COMMENTS OR CONTENTS CONTAINED WITHIN - local0 1
         local0.emerg;local0.alert;local0.crit;local0.err;local0.warning;local0.notice;local0.info;local0.debug  /var/adm/CSCOpx/log/dmgtd.log
         #END CSCOmd DO NOT EDIT BEFORE THIS LINE  1
         local7.info  /var/log/syslog_info
    My guess is that the incoming messages are getting written to the wrong file.  What do I need to change to correct this?

    I found that all of my syslog messages were being captured under /var/log/messages.  This was due to my Cisco devices being configured with "logging facility local5".  Instead of reconfiguring all of my devices to log to facility local7, I just changed the following line in syslog.conf and restarted (/etc/init.d/syslog restart)
    Before:
    local7.info  /var/log/syslog_info
    After:
    local5.*  /var/log/syslog_info
    Probably not the best way to do it, but it worked for me.
    -Rick

Maybe you are looking for