System logging is a method of collecting system messages generated by system events. The Branch Gateway includes a logging package that collects system messages in several output types. Each of these types is called a sink. When the system generates a logging message, the message can be sent to each sink that you have enabled.

System messages do not always indicate problems. Some messages are informational, while others may help to diagnose problems with communications lines, internal hardware, and system software.

By default, all sinks are disabled. When enabled, log file and Syslog sink settings can be saved by using the command: copy running-config startup-config to save the running configuration to the startup configuration. However, the Session sink and its settings are deleted when the session is terminated.

You can define filters for each sink to limit the types of messages that the sink receives.

The logging facility logs configuration commands entered through the CLI or SNMP, and system traps and informative messages concerning the functioning of various processes. However, a user with user privileges who enables the log can only see the entered commands. For example, a user with read-only privileges cannot see entered commands having a read-write user level. In addition, the log does not display confidential information, such as, passwords and VPN pre-shared keys.