350-401 · Question #1016
Which configuration filters out DOT1X messages in the format shown below from being sent toward Syslog server 10.15.20.33? Nov 20 13:47:32/553 %DOT1X-5-FAIL:Authentication failed for client (e04f.438e
The correct answer is B. logging discriminator DOT1X msg-body drops DOTX. The question asks for the correct logging discriminator configuration to filter out syslog messages that contain specific text related to DOT1X authentication failures.
Question
Which configuration filters out DOT1X messages in the format shown below from being sent toward Syslog server 10.15.20.33? Nov 20 13:47:32/553 %DOT1X-5-FAIL:Authentication failed for client (e04f.438e.de4f) on interface Gi1/0/1 AudtiSessionID 0A0B50A5000004543910739E
Options
- Alogging discriminator DOT1X facility drops DOT1X
- Blogging discriminator DOT1X msg-body drops DOTX
- Clogging discriminator DOT1X mnemonics includes DOTX
- Dlogging discriminator DOT1X mnemonics includes DOT1X
How the community answered
(39 responses)- A3% (1)
- B74% (29)
- C8% (3)
- D15% (6)
Why each option
The question asks for the correct logging discriminator configuration to filter out syslog messages that contain specific text related to DOT1X authentication failures.
The `facility` keyword filters based on the syslog facility code (e.g., LOCAL7, USER), not on the message content 'DOT1X'.
The `logging discriminator` command with `msg-body drops` allows filtering based on a regular expression match within the syslog message body. Specifying `DOTX` as the pattern effectively targets and drops messages containing related authentication failure text, such as 'DOT1X-5-FAIL' from the example.
The `mnemonics` keyword filters based on the mnemonic code (e.g., FAIL), not on 'DOTX', and `includes` would retain messages rather than drop them.
The `mnemonics` keyword filters based on the mnemonic code (e.g., FAIL), not on 'DOT1X', and `includes` would retain messages rather than drop them.
Concept tested: Cisco IOS logging discriminator configuration for syslog
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/esm/configuration/15-mt/esm-15-mt-book/esm-syslog-logging-disc.html
Topics
Community Discussion
No community discussion yet for this question.