Recently, a Huawei s5720-si-v200r019 switch of the company has a large number of log alarms. The reason is that the port has a full flow alarm, resulting in the normal log output being overwritten. Some alarms are as follows:
(this method is applicable to the processing of all port logs of Huawei switches, and other types can also refer to this method.)
Sep 18 2021 12:25:59+08:00 CSY_HBLF_5F5-01_43.252 %%01IFPDT/4/INT_OUTBRDR(l)[0]:The output rate change ratio exceeded the threshold. (IfIndex=8, InterfaceName=GigabitEthernet0/0/2, ThresholdPercent=50%, CurrentStatisticalPeriodRate=24978552, LastStatisticalPeriodRate=53124002)
Sep 18 2021 12:11:55+08:00 CSY_HBLF_5F5-01_43.252 %%01IFNET/4/BWRATE_OUT_RESUME(l)[1]:Interface output flow bandwidth usage was restored to the log threshold. (Interface=8, BandWidthUsage=80, LogThreshold=80, InterfaceName=GigabitEthernet0/0/2)
The solution is as follows:
info-center filter-id bymodule-alias IFNET BWRATE_ OUT_ RISING
info-center filter-id bymodule-alias IFNET BWRATE_ OUT_ RESUME
info-center filter-id bymodule-alias IFPDT PKT_ OUTQUEDROP_ NL
info-center filter-id bymodule-alias IFPDT PKT_ OUTQUEDROP_ ABNL
info-center filter-id bymodule-alias IFPDT INT_ INBRDR
info-center filter-id bymodule-alias IFPDT INT_ OUTBRDR
Field definition:
BWRATE_ OUT_ Rising: the bandwidth utilization of the interface exceeds the configured threshold
BWRATE_ OUT_ Resume: the bandwidth utilization of the interface is lower than the configured recovery threshold
PKT_ OUTQUEDROP_ Nl: the number of packet losses in the outgoing direction of the interface has recovered below the threshold
PKT_ OUTQUEDROP_ Abnl: the number of packet losses in the outgoing direction of the interface has recovered below the threshold
INT_ Inbrdr: the sudden change of the flow in the direction of the interface exceeds the threshold
INT_ Outbrdr: the sudden change of flow in the outlet direction of the interface exceeds the threshold
Use the Huawei switch product document to directly search the switch log field: ifpdt/4/int_ Outbrdr, like this, you can find the corresponding explanation, and then turn off the corresponding log printing in the switch info center. The details may be different from those written in the article, but the method is similar. You should learn to make good use of the product documents.
Reference document:
1. Usage description of Huawei switch s5700 filter ID