It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda Web Application Firewall
Overview Documentation Training Certification Materials

System Log Messages

  • Last updated on

The following is the list of system log messages, which includes the following:

  • Log Category - The Severity Level of the log.
    • LOG_EMERG - System is in an unusable state (Highest priority).
    • LOG_ALERT - Response must be taken immediately.
    • LOG_CRIT - Critical conditions (System in critical condition).
    • LOG_ERROR - Error conditions (An error processing the request).
    • LOG_WARN - Warning conditions (An action is required to be taken on a particular module configuration or process. If no action is taken, an error might occur. Example: “Encryption Key is going to expire within 5 days”).
    • LOG_NOTICE - Normal but significant condition (An unusual activity is noticed, no immediate action is required).
    • LOG_INFO - Informational messages (on ACL configuration changes)
    • LOG_DEBUG - Debug level messages (Lowest priority).
  • Log ID - The Event ID of the log.
  • Log Message - Description about the log.


Log CategoryLog IDLog Message

8Unknown Error

110Network Unreachable

111Connection Refused
Data Path Monitoring (STM)

1001   System Out of Memory

1002   System WAC Version
LOG_NOTICE1003Mem Start: SCB <start-address>, Low <start-address>, High <start-address>

 1004-8 System Process Related

 1009    System Upgrade related

 1010  Date Setting related

 1011  Time Zone related

 1012  System Shutdown
LOG_CRIT1013System startup failed at initializing: <stage>. Switching to maintenance mode
LOG_CRIT1014Shutting down all services
LOG_NOTICE1014Shutting down services completed
LOG_NOTICE1015Restarting services
LOG_NOTICE1015Restarting services completed

 1016  Core Dump

 1017  Process Start

 1018  Booting related
LOG_NOTICE1019 - 1028

Activate: Default boot image set to <Image Name>

System Related

LOG_EMERG1105<Process> is not present
LOG_NOTICE1111Process mon /proc error ret =<retcode> comm=<commandid> pid=<process-id>
LOG_ALERT1119(System is getting real hot) or (Possible overheating at device <device-name> temp reading=<temp in 'C>)
LOG_ALERT1125SBC PII temp overshoot.
LOG_ALERT1126System highest temp has reached = <External temp 'C> <Internal Temp in 'C>
LOG_ALERT1128In Fan Group <Group ID> Fan <Fan ID> is Running at <Current Value> rps which is less than expected <default value>
LOG_NOTICE1130HW: Changing FAN speed <Old Value> -> <New Value> TempReadings (<Max internal 'C> <Max External temp in 'C>])
LOG_NOTICE1203SBC FAN <fan-name> detected rpm = <rpm value>
System RPCs

2001-12  System RPCs Related
Threshold Controlled (THRSHLD)
LOG_ALERT50001Threshold Level crossed.
LOG_ALERT50002Threshold Level crossed on a service.
LOG_ALERT50003System critical temp has reached.
LOG_ALERT50004System highest temp has reached.
LOG_ALERT50005One of the CPU/System fans is dead.
LOG_ALERT50007Firmware storage exceeds 85%.
LOG_ALERT50008Mail storage exceeds 85%.
LOG_ALERT50009Log storage exceeds 85%.
LOG_ALERT50010One of the RAID arrays is degrading.
SERVICE
LOG_NOTICE14001New Service (ID 0x<vip-context>) Created at <IP Address>:<Port>
LOG_ERROR14001Failed to Create Service at <IP Address>:<Port>
LOG_NOTICE14002Service Started <IP Address>:<Port>
LOG_ERROR14003Failed to Delete Service (ID 0x%08x) at <IP Address>:<Port>
LOG_ERROR14004Failed to Create Rule at <IP Address>:<Port>
LOG_NOTICE14004New Rule (ID 0x<rule-context>) Created at <IP Address>:<Port> for ID 0x<vip-context>
LOG_NOTICE14005Commited: URL [<URL Key>] Header [<Header Key>]
LOG_ERROR14006Deleted Rule (ID <vapp-context> at <IP:Port> URL [<URL Key>] Header [<Header Key>]
LOG_ERROR14007Failed to Create Service at <IP Address>:<Port>
LOG_NOTICE14007New Vapp (ID 0x<vapp-context>) Created at <IP Address>:<Port> for ID 0x<vip-context>
LOG_NOTICE14008Failed to commit Application: Domain [<Application Rule Domain>] URL [<Application Rule URL>]
LOG_ERROR14009Failed to Delete Vapp (ID 0x<vapp-context>) at <IP Address>:<Port> Domain [<Application Rule Domain>] URL [<Application Rule URL>]
Config Agent (CONFIG)
LOG_ERROR12001Local GATEWAY_NAME not found
LOG_ERROR12001Digest failed
LOG_ERROR12001No Monitoring Dispatcher found
LOG_ERROR12001To execute this operation, peer node should be non-operational
LOG_ERROR12001Configuring Secure Traffic Manager Succeeded
LOG_ERROR12001Failed to resolve type of clear stats
LOG_ERROR12002Duplicate parameter
LOG_ERROR12002Target doesn't exist
LOG_ERROR12002Deleting RuleBackup
LOG_ERROR12002RuleBackup delete succeeded
LOG_ERROR12002Deleting ServerBackup
LOG_ERROR12002ServerBackup delete succeeded
LOG_ERROR12002Unable to delete ServerBackup
LOG_ERROR12002Deleting Server
LOG_ERROR12002Server delete succeeded
LOG_ERROR12002Unable to delete Server
LOG_ERROR12002Deleting application key
LOG_ERROR12002Application key delete succeeded
LOG_ERROR12002Unable to delete application key
LOG_ERROR12002Deleting QOS class
LOG_ERROR12002QOS class delete succeeded
LOG_ERROR12002Unable to delete QOS class
LOG_ERROR12002Deleting Service
LOG_ERROR12002Service delete succeeded
LOG_ERROR12002Unable to delete Service
LOG_ERROR12002Deleting ACL
LOG_ERROR12002ACL delete succeeded
LOG_ERROR12002Unable to delete ACL
LOG_ERROR12002Deleting NAT entry
LOG_ERROR12002NAT entry delete succeeded
LOG_ERROR12002Unable to delete NAT entry
LOG_ERROR12002Deleting ARP entry
LOG_ERROR12002ARP entry delete succeeded
LOG_ERROR12002Duplicate route
LOG_ERROR12002Deleting route
LOG_ERROR12002Route delete succeeded
LOG_ERROR12002Unable to delete route
LOG_ERROR12002Deleting Interface
LOG_ERROR12002Interface delete succeeded
LOG_ERROR12002Unable to delete Interface
LOG_ERROR12002Deleting VirtualHost
LOG_ERROR12002VirtualHost delete succeeded
LOG_ERROR12002Unable to delete VirtualHost
LOG_ERROR12002Adding VirtualHost
LOG_ERROR12002VirtualHost add succeeded
LOG_ERROR12002Unable to add VirtualHost
LOG_ERROR12002Adding Interface
LOG_ERROR12002Interface add succeeded
LOG_ERROR12002Unable to add Interface
LOG_ERROR12002Interface modify succeeded
LOG_ERROR12002Unable to modify Interface
LOG_ERROR12002Adding ARP entry
LOG_ERROR12002ARP entry add succeeded
LOG_ERROR12002Unable to add ARP entry
LOG_ERROR12002ARP entry modify succeeded
LOG_ERROR12002Unable to modify ARP entry
LOG_ERROR12002Adding Route
LOG_ERROR12002Route add succeeded
LOG_ERROR12002Unable to add Route
LOG_ERROR12002Gateway is not directly reachable on any interface
LOG_CRIT12003Failed to retrieve initial groups
LOG_ERROR12004Can't store rule ID
LOG_ERROR12005Can't get " NEXTSAPID ": missing " SAPID " or error retrieving " SAPID
LOG_ERROR12007$NC_INSTALL_ROOT not set
LOG_ERROR12007Target doesn't exist
LOG_ERROR12007Failed to create server
LOG_ERROR12007SetServerConnAttr failed
LOG_ERROR12007SetServerRedirectAttr failed
LOG_ERROR12007SetServerOutOfBandMonitorAttr failed
LOG_ERROR12007SetServerMonitorAttr failed
LOG_ERROR12007SetServerLBAttr failed
LOG_ERROR12007StartServer failed
LOG_ERROR12007SetServerSSLServicePolicy failed
LOG_ERROR12007SetServerSSLServiceOn failed
LOG_ERROR12007SetServerSSLServiceOff failed
LOG_ERROR12007ActiveServerOutOfBandMonitorAttr failed
LOG_ERROR12007Failed to delete server
LOG_ERROR12007Failed to reset Server IP, Port or VLAN
LOG_ERROR12007Failed to look up server
LOG_ERROR12007SetServerTcpMonitorAttr failed
LOG_ERROR12007EnableServer failed
LOG_ERROR12007DisableServer failed
LOG_ERROR12007ActiveServerOutOfBandMonitorAttr failed
LOG_ERROR12008Duplicate server
LOG_ERROR12008Attaching server
LOG_ERROR12008Attaching server succeeded
LOG_ERROR12008Failed to look up back-end server
LOG_ERROR12008Detaching server
LOG_ERROR12008Detaching server succeeded
LOG_ERROR12009OUT OF MEMORY !!! Asserting…
LOG_ERROR12009Error in reading ReadXmlFileIntoString
LOG_ERROR12009sapIndex.AddFromXMLStr (..., SAP::nsap) failed
LOG_ERROR12009Could not find mgmt container
LOG_ERROR12009Could not find ports/ethernet container
LOG_ERROR12009Could not find hardware container
LOG_ERROR12009Could not find box container
LOG_ERROR12009Could not find linux interface
LOG_ERROR12009Could get local box path
LOG_ERROR12009AddSAP for box2SAP failed
LOG_ERROR12009RecurAddChldOfAggSAP for box2 failed
LOG_ERROR12009SetBoxParametersFromOrgTree failed (box2) !
LOG_ERROR12009SetBoxName failed (box2) !
LOG_ERROR12009SetBoxParametersFromOrgTree failed !
LOG_ERROR12009In SetBoxParametersFromOrgTree. Invalid path specified
LOG_ERROR12009Could not find Linux interface
LOG_ERROR12009There should have been 3 physical interfaces.
LOG_ERROR12009SetParameterValuesUnderPath failed !
LOG_ERROR12009in SetBoxParametersFromOrgTree. UpdateDefaultRoute failed !
LOG_ERROR12009In GetClearConfTree. SetInitValuesForCC failed !
LOG_ERROR12009In UpdateDefaultRoute. Should have matched only one route !
LOG_ERROR12009In UpdateDefaultRoute. tmpIdx.GetAggSAP failed !
LOG_ERROR12009In UpdateDefaultRoute. sapIndex.GetParamSAP failed !
LOG_ERROR12009In UpdateDefaultRoute. tmpIdx.GetParamSAP failed !
LOG_ERROR12009In UpdateDefaultRoute. tmpIdx.ModifySAP failed !
LOG_ERROR12009In GetMD5HashForFile. CheckIfValidFileToRetrieve failed
LOG_ERROR12009GetPathForUser failed !
LOG_ERROR12009in PutSAPTree. GetHomeDirForUser failed !
LOG_ERROR12009In PutSAPTree. Invalid path specified !
LOG_ERROR12009In PutSAPTree. Path not found in tmp sapIndex
LOG_ERROR12009Error. AddFromXMLStr failed !
LOG_ERROR12009in PutSAPTree. Invalid node in treediff result
LOG_ERROR12009in PutSAPTree. No acl perm
LOG_ERROR12009in PutSAPTree.ModifySAP failed
LOG_ERROR12009in PutSAPTree. Trying to modify a read-only node
LOG_ERROR12009Cannot modify a read-only node
LOG_ERROR12009Couldn't read old bind value
LOG_ERROR12009in PutSAPTree.ModifySAP failed
LOG_ERROR12009Can't replace the root / (session.cc)in PutSAPTree. GetFatherPath failed
LOG_ERROR12009in PutSAPTree.AddChildSAP failed
LOG_ERROR12009Can't replace the root /
LOG_ERROR12009in PutSAPTree.DeleteSAPTree failed
LOG_ERROR12009Error invalid operation type
LOG_ERROR12009PutRootSAPTree failed in GetAggSAP
LOG_ERROR12009No path provided
LOG_ERROR12009Failed due to insufficient user permission
LOG_ERROR12009Internal error while adding a child node!
LOG_ERROR12009Internal error: while parsing query!
LOG_ERROR12009No Parameter found for querying
LOG_ERROR12009Parameter must be specified in a Container.
LOG_ERROR12009ERROR ! No column names specified!
LOG_ERROR12009Invalid or non existent home directory found !
LOG_ERROR12009CheckPermForInterNodes failed
LOG_ERROR12009GetPathForUser failed
LOG_ERROR12009Context doesn't exist !
LOG_ERROR12009In CheckPermForQuery. AclMatchAuth failed!
LOG_ERROR12009in CheckPermForInterNodes. GetHomeDirForUser failed
LOG_ERROR12009In CheckPermForInterNodes. AclMatchAuth failed!
LOG_ERROR12009in CheckPermAndSet. GetPermissionForUser failed
LOG_ERROR12009Non-existing path corresponding to global parameters
LOG_ERROR12009Error in SystemBackUp. failed to acquire mutex.
LOG_ERROR12009in RecurAddAcl. GetRelativePath failed !
LOG_ERROR12009Session::GetCommandsForUser.
LOG_ERROR12009Empty peer gateway key
LOG_ERROR12009Setting of peer gateway key failed
LOG_ERROR12009in CheckReadPermOnParent. GetFatherPath failed
LOG_ERROR12009in GetAbsBindPath. GetHomeDirForUser failed !
LOG_ERROR12009GetWacBoxVersion failed !
LOG_ERROR12009GetInterfaceAddress failed !
LOG_ERROR12010Failed to set SetVipSSLEphemeralKey
LOG_ERROR12010Policy is bound to more than one QOS class
LOG_ERROR12010Failed to set " SERVICE_APP_PROTOCOL "
LOG_ERROR12010Failed to set " SERVICE_APP_PROTOCOL " on
LOG_ERROR12010Adding qos class
LOG_ERROR12010Setting qos class
LOG_ERROR12010Unsetting qos class
LOG_ERROR12010Duplicate application
LOG_ERROR12010Failed to find back-end server in server list
LOG_ERROR12010Failed to look up Secure Traffic Manager object
LOG_ERROR12011Couldn't add paramSAP, name:
LOG_ERROR12013Failed to allocate space for integer argument
LOG_ERROR12013Failed to allocate space for float argument
LOG_ERROR12013Failed to allocate space for long long argument
LOG_ERROR12013Failed to allocate space for char string argument
LOG_ERROR12014Unable to get import/export handle
LOG_ERROR12014Unable to set error handle
LOG_ERROR12014Couldn't get file handle
LOG_ERROR12014Set file handle failed
LOG_ERROR12014Couldn't ready curl for upload
LOG_ERROR12014Couldn't set file size
LOG_ERROR12014Unsupported method
LOG_ERROR12014Couldn't set target
LOG_ERROR12015SSL Version 3 enabled
LOG_ERROR12015TLS enabled
LOG_ERROR12015No key/cert bindings found
LOG_ERROR12015Attempt to use unsupported key type
LOG_ERROR12015Unable to extract certificate
LOG_ERROR12015Unable to extract issuer certificate
LOG_ERROR12015Unable to extract key
LOG_ERROR12015Unable to extract exchange key
LOG_ERROR12015Error extracting trusted certificate
LOG_ERROR12018Internal Error
LOG_ERROR12018Invalid Path Specified
LOG_ERROR12019Unable to allocate memory
LOG_ERROR12021in ParamCmp. Cant modify node attributes
LOG_ERROR12021Incorrect permissions given to root role
LOG_ERROR12021Cannot modify ACL for root node
LOG_ERROR12021Cannot give write permissions for a read-only node.
LOG_ERROR12021in TreeDiff::GetDiff. Invalid path passed !
LOG_ERROR12021in AggCmp. Cant modify node attributes
LOG_ERROR12021managementSystemErrorMessage
LOG_ERROR12021in GetDiff. Retrieved inv. node
LOG_ERROR12021in GetDiff.AddInterNodes fail!
LOG_ERROR12021in GetDiff. inv. node
LOG_ERROR12021In GetDiff. invalid return from SAPCmp!
LOG_ERROR12024Backup rule group cannot be the same as the primary rule group
LOG_ERROR12027Value for " CACHE_SVC_MAX_OBJECT_SIZE " too large
LOG_ERROR12028Invalid value for " NET_INTERFACE_OPERATION_STATUS " . Using default
LOG_ERROR12028Unable to set media-mode
LOG_ERROR12029Failed to create HTTP monitor
LOG_ERROR12030Failed to look up primary server
LOG_ERROR12030Failed to look up backup server
LOG_ERROR12031Failed to add route on <mgmt-port> due to: netmask doesn't match route address
LOG_ERROR12031Netmask doesn't match route address
LOG_ERROR12031Modify Route: Unsupported operation
LOG_ERROR12032Failed to add route
LOG_ERROR12033Unsupported operation
LOG_ERROR12038Unexpected REN_AGG
LOG_NOTICE12040Processing messages in the list
LOG_ERROR12041Connection NULL in NC_RemoteCaller::getResponseHandle
LOG_ERROR12049Can not parse cluster info
LOG_ERROR12049Can not send message to heartbeat. Heartbeat Socket is NULL
LOG_CRIT12049Peer IP Address is NULL. Exiting
LOG_CRIT12049$NC_HEARTBEAT_DIR not set. Exiting
LOG_NOTICE12049Processing messages in the list failed. Ignoring the error
LOG_NOTICE12049Starting main message processing loop
LOG_NOTICE12049Initiating login to Local SAPD after updating configuration
LOG_NOTICE12049Getting Cluster Information after updating configuration
LOG_NOTICE12049Configuration database versions match. Setting contactPeer flag to true
LOG_NOTICE12049Configuration database versions mismatch. Setting contactPeer flag to false.
LOG_CRIT12049Can not relogin to SAPD. Exiting
LOG_CRIT12049Going to maintenance mode
LOG_CRIT12049$NC_INSTALL_ROOT not set.
LOG_CRIT12049Failed to create cluster key. This will shutdown communication with the peer-node
LOG_CRIT12049Failed to create peer-gateway key. This will shutdown communication with the peer-node
LOG_CRIT12049Failed to create encryption keys for peer-peer communication
LOG_ERROR12050Heartbeat Client closing socket
LOG_ERROR12050Heartbeat Client can not open socket
LOG_ERROR12050Heartbeat Client can not read message from Heartbeat Server
LOG_ERROR12050Can not send message to Heartbeat
LOG_ERROR12051The account has been disabled. Please contact your admin
LOG_ERROR12051Only one more day left to expire your password. Please change your password now
LOG_ERROR12051Your password is about to expire. Please change your password
LOG_ERROR12053Failed to initialize signal handlers
LOG_ERROR12053Failed to digest initial configuration
LOG_ERROR12053Failed to bind transResponse socket on 127.0.0.1
LOG_ERROR12053Exec for switchtomaint.sh failed
LOG_ERROR12053Termination requested by the signal handler
LOG_ERROR12054GetCmdGrpXML failed
LOG_ERROR12054sapIndex.AddFromXMLStr(..., \"nc:ncRoot\") failed
LOG_ERROR12054Usage: sap_initdb xmlFile
LOG_ERROR12054Failed to initialize the sessions DB
LOG_ERROR12054Failed to initialize SAP DB
LOG_ERROR12054Failed to set System Configuration Timestamp to 0
LOG_ERROR12054Failed to set Configuration Tree Timestamp to 0
LOG_ERROR12057Can't store vhid
LOG_ERROR12057Updating virtual host id is not supported
LOG_ERROR12058Sysmon Client closing socket
LOG_ERROR12058Sysmon Client can not open socket
LOG_ERROR12058Sysmon Client: cannot bind to Socket
LOG_ERROR12058Sysmon Client can not read message
LOG_ERROR12058Can not allocate memory for sysmon event message
LOG_ERROR12058Can not allocate memory for sapd event message
LOG_ERROR12058Unknown message received from Sysmon
LOG_ERROR12058Unknown message to sysmon
LOG_ERROR12066Socket::WritePktToSocket - sockfd == -1
LOG_ERROR12067Failed to look up associated application
LOG_ERROR12067Adding Application
LOG_ERROR12067Duplicate app key
LOG_ERROR12067No app keys
LOG_ERROR12067Failed find back-end server in server list
LOG_ERROR12067No such object
LOG_ERROR12068No rules
LOG_ERROR12068Failed find back-end server in server list
LOG_ERROR12070Invalid value specified for IPS_COOKIE_MODE),
LOG_ERROR12073Duplicate User Realm name: "+authUserRealmName
LOG_ERROR12073Failed to write userRealm Name "+authUserRealmName
LOG_ERROR12073User Realm name doesn't exist
LOG_ERROR12073Failed to delete User Realm name "+ realms_.GetRealmName
LOG_ERROR12073Failed to delete User Realm conf file "+ realms_.GetRealmName
LOG_ERROR12074InterfaceDependantKey
LOG_ERROR12081Finalize succeeded!
LOG_ERROR12083Failed to look up Secure Traffic Manager object
LOG_ERROR12083No such object
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_START_URL "
LOG_ERROR12085Invalid parameter length IPS_WEBGATE_REDIRECT_URL
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_COOKIE_NAME
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_COOKIE_VALUE
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_COOKIE_EXPIRES
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_COOKIE_PATH
LOG_ERROR12085Invalid parameter length " IPS_WEBGATE_COOKIE_DOMAIN
LOG_ERROR12085Invalid parameter value " IPS_WEBGATE_COOKIE_SECURE
LOG_ERROR12088Invalid parameter value <IPS_REDIRECT_STATUS>
LOG_ERROR12088Invalid parameter value <IPS_REWRITE_STATUS>
LOG_ERROR12089Invalid parameter value <IPS_BLOCK_SOAP_REQ >
LOG_ERROR12090Error in ReconfigureSubPolicies mismatch in number of sub-policies
LOG_ERROR12100Invalid sessionid specified for StartPktTrace
LOG_ERROR12100Invalid port specified for Packet dump
LOG_ERROR12100Invalid sessionid specified for StartPktTrace
LOG_ERROR12102Maximum allowed groups exceeded
LOG_ERROR12109Invalid value for < ACL_PROTOCOL > (Must be an integer between 0 and 255, inclusive)
LOG_ERROR12109Unsupported operation ACL
LOG_ERROR12197Failed to start Session Recording
LOG_ERROR12197Failed to stop Session Recording
Caching (CACHE)
LOG_NOTICE6001System Low on Memory: Adjusting Cache Parameters - Current Max:<Max Size>, High:<High Water Mark>, Safe<Safe Water Mark>
LOG_NOTICE6001System Low on Memory: Adjusting Cache Parameters - New Max:<Max Size>, High:<High Water Mark>, Safe<Safe Water Mark>
LOG_NOTICE6002Cache Purged
LOG_NOTICE6003Cache purge failed: instance <Count>, thid <Thread ID>, table <Table ID>, target <Size>, collected <Freed Size>
Load Balance (LB)
LOG_ALERT7005Server <IP Address>:<Port> is enabled
LOG_ALERT7006Server <IP Address>:<Port> is disabled. New mode <Operational Mode>
LOG_NOTICE7007Server <IP Address>:<Port> is created
LOG_ALERT7008Server <IP Address>:<Port> is deleted
LOG_ALERT7012Server <IP Address>:<Port> is enabled by configuration.
LOG_ALERT7013Server <IP Address>:<Port> is disabled by configuration.
Access Logs (WEBLOG)
LOG_WARN9001Configurations for start or stop time *MAY* not be proper.
LOG_ERROR9003Error: Unable to establish control connection.
LOG_ERROR9004Error: Unable to establish data connection
LOG_ERROR9005Error: Unable to establish SSL control connection
LOG_ERROR9006Error: Unable to authenticate the user
LOG_ERROR9007Error: Unable to transfer data to ftp server: <IP Address>
LOG_ERROR9009Connection to <IP Address> failed, error code = <Error Code>
LOG_ERROR9009SSL Connection to <IP Address> failed
LOG_ERROR9010Out of memory for formatting logs
LOG_NOTICE9013Dropping logs, running low on memory
LOG_ERROR9013Error in hash generation or encryption
LOG_NOTICE9014Logging parameters are set for vip <IP Address>:<Port>
LOG_ERROR9018Unable to log the request since FTP server is slow or unreachable
LOG_ERROR9018Dropping logs since queue is full
LOG_ERROR9019Signature generation of logs failed
Shared Symmetric Key (SSKEY)
LOG_WARN41001Encryption Key is going to expire within <Number> days", REMAINING_DAYS_FOR_EXPIRY( pSharedKey->keyExpiryTimeout,curTimeInSecs)
LOG_WARN41002Encryption Key has already expired
BYPASS
LOG_ALERT46001Unit is switching to bypass mode
LOG_NOTICE46002State set to bypass: stopping heartbeat
LOG_NOTICE46003State set to normal: starting heartbeat



Event Manager (EVM)
LOG_ERROR11001Event Manager startup failure: could not handle signals
LOG_ERROR11007EnableSyslogService: create socket failed
LOG_ERROR11008fopen <log_filename>: <error_description>
LOG_ERROR11009<log_filename> write failed <error_description>
Heartbeat (HB)
LOG_ERROR15001Heartbeat events dropped, queue is full
LOG_ERROR15002Unable to bind to address
LOG_ERROR15003Error sending packet
LOG_ERROR15003Error receiving data From remote gateway
LOG_ERROR15004Attempting to reinitialize the Heartbeat Server before closing
LOG_ERROR15004Attempting to send data without Initialization
Certificate (CERT)
LOG_NOTICE17001<ssl-function-name>: Trusted certificate expired: CN=<Common Name>, OU=<Org Name >
LOG_NOTICE17001<ssl-function-name>: Trusted certificate expired: O=<Org Name> L=<Location> S=<State> C=<City>
LOG_NOTICE17500Cert Initialization
SSL and TLS (SSL)
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: received bad certificate signature
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: failed to verify certificate signature
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: certificate chain too long
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: failed to decode certificate
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: no certificate
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: failed to validate certificate chain
LOG_NOTICE16001<ssl-function-name>: Base 0x<ssl-handle> - Access denied: <Error Code>

 16002  SSL PMS Error

 16003  SSL DEC Error
LOG_NOTICE16004<ssl-function-name>: Base 0x<ssl-handle> - Sending alert: <Alert-desc> (<Alert Code>) from [<IP Address>:<Port>]
LOG_NOTICE16005<ssl-function-name>: Base 0x<ssl-handle> - Received alert: <Alert-desc> (<Alert Code>) from [<IP Address>:<Port>]

 16006  SSL FIN Error

 16010  SSL New Socket

 16011  SSL Delete Socket
LOG_NOTICE16012<ssl-function-name>: Base 0x<ssl-handle> - No RSA private key available
LOG_NOTICE16012<ssl-function-name>: Base 0x<ssl-handle> - Mismatched key size <Size> (expected <Size>)
LOG_NOTICE16012<ssl-function-name>: Base 0x<ssl-handle> - Failed to get authority private key
LOG_NOTICE16012<ssl-function-name>: Base 0x<ssl-handle> - Called on a client socket
LOG_NOTICE16012<ssl-function-name>: Base 0x<ssl-handle> - Called on a server
LOG_ERROR16013<ssl-function-name>: Out of memory
LOG_ERROR16013<ssl-function-name>: Base 0x<ssl-handle> - Out of memory
LOG_ERROR16013<ssl-function-name>: Socket 0x<sslsock-handle> - Out of memory
LOG_NOTICE16014<ssl-function-name>: Incorrect server name: length should be between 0 and < length >

 16015  SSL Message Error
LOG_ERROR16016<ssl-function-name>: Base 0x<ssl-handle> - Failed to schedule crypto command

 16017  SSL SEND Error

 16018  SSL RECV Error
LOG_NOTICE16019< ssl-function-name >: Cannot configure more than <Number> certificate policies
LOG_NOTICE16020<ssl-function-name>: Cannot configure more than <Number> trusted certificates per service
LOG_NOTICE16021<ssl-function-name>: No available SSL version for client socket
LOG_NOTICE16023<ssl-function-name>: Ephemeral Key changed
LOG_NOTICE16024<ssl-function-name>: Base 0x<ssl-handle> - No ephemeral key available

 16025 SSL Content Type Mismatch

 16026  SSL DN Constraint

 16027  SSL Certificate Decode Failure

 16028 SSL Certificate Unsupported

 16029  SSL Certificate Invalid Time

 16030  SSL Client Renegotiation

 16031  SSL Handshake Failure

 16040  SSL Session Timed Out

 16050  SSL General Notice
LOG_NOTICE16500SSL Initialization
HTTP Proxy (HTTPSVC)
LOG_ERROR00000HttpRequestCtxDequeue Running out of contexts
LOG_ERROR13100HttpServerParseRequest: Parse failed; Malformed version <request-buffer>
LOG_ERROR13100HttpServerParseRequest: Parse failed; Unknown major number <request-buffer>
LOG_ERROR13100HttpServerParseRequest: Parse failed; Unknown minor number <request-buffer>
LOG_ERROR13100HttpServerParseRequest: Parse failed; Unknown method: <request-buffer>
LOG_ERROR13100HttpServerParseRequest: Parse failed; Malformed URL <request-buffer>
LOG_ERROR13100HttpServerParseRequest: Parse failed; Malformed line end <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Malformed version <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Unknown major number <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Unknown minor number <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Malformed status code <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Header: <request-buffer>
LOG_ERROR13101HttpClientParseResponse: Parse failed; Malformed line end <request-buffer>
LOG_WARN13103OnHttpServerSockRecv: Session timed out from <Client IP:Port>
LOG_NOTICE13200Can not connect to server (< error-code >) for connection from: 0x< IP Address >
LOG_NOTICE13200SSL connection to server for connection from: 0x< IP Address > failed
LOG_NOTICE13200Error connecting to server (< error-code >) for connection from: 0x< IP Address >
LOG_NOTICE13200Error opening SSL connection to server for connection from: 0x< IP Address >
LOG_NOTICE13200SSL accept failed for connection from: 0x< IP Address >
LOG_NOTICE13200Error switching connection from: 0x< IP Address > to SSL
LOG_NOTICE13200Error accepting SSL connection from: 0x< IP Address >
Web Authentication (WEBAUTH)
LOG_ERROR18203Unable to contact the authentication server, (RPC Queue full)
LOG_ERROR18204Remote procedure call to authentication server timed out
LOG_ERROR18205Login attempt failed for user <User ID>
LOG_ERROR18206Changing password failed for user <User ID>
LOG_NOTICE18207Added a realm:<Realm ID>
LOG_ERROR18208Unable to add realm:<Realm ID>
LOG_NOTICE18209Deleted a realm:<Realm ID>
LOG_ERROR18215Error received from webauthd , <Error String>
LOG_NOTICE18216Insert into ptrie - allocation failed (flags: 0x<internal-flags-value>, mem: <internal-mem-handle>) "Creating AuthzCache - inserting into ptrie failed(nodes: <internal-node-handle>, <internal-node-handle>
LOG_NOTICE18217Client attempted to Logout without login session cookie\n
LOG_WARN18218Invalid external policy store configured, realm name = <realm-name>
Application Firewall (APS)
LOG_ERROR19003GetIpsUrlProfileLearningStats: error <Error_ID>
LOG_NOTICE19031XML Firewall error: <error-string> ( offset: <offset number>, code: <error code> )",pErr->desc,( int )pErr->offset, pErr->code
LOG_NOTICE19031XML Firewall error: Input validation
LOG_NOTICE19031XML Firewall error: Attack pattern
LOG_NOTICE19031XML Firewall error: Operation denied
LOG_NOTICE19031Received error from Web Services Firewall module: error desc (<Error Id>: <error message> )
LOG_ERROR19032Failed to allocate NCFORMINFO buffer
LOG_ERROR19032Unable to add session param to NCFORMINFO (no-name param)
LOG_ERROR19032Failed to allocate NCFORMINFO buffer(resp)
LOG_ERROR19032Unable to add session param to NCFORMINFO (multi-value)
LOG_ERROR19032Failed to allocate buffer for response URL rewrite
LOG_ERROR19032Failed to allocate buffer for form encryption
LOG_ERROR19035PfCSRFProtection: No CSRF token found
LOG_WARN19500Could not cloak match for <group name>. Value of Initial or Trailing Characters to Keep is too large
LOG_WARN19500POST request with both Content-Length and Transfer-Encoding headers [ url: <URL|Malformed URL> ], dropped
LOG_WARN19500No intrusion information for intrusion ID
Cookie Security (COOKIE)
LOG_ALERT20003Cookie expires: Client <IP Address>
LOG_ALERT20004Cookie auth failed: cookiename auth failed
LOG_ALERT20005Cookie Length Overflow: Client <IP Address>
LOG_ERROR20006Failed to allocate Shared Key context for cookie encryption
CRL Daemon (CRL)
LOG_ERROR40001CRL File Download successfull
LOG_ERROR40002CRL File Download failed
FTP Proxy (FTPSVC)
LOG_ERROR21011Error while transferring data
LOG_WARN21014<Internal Session ID> Invalid client ip-address (<IP Address>) specified with the port command, actual client ip-address is (<IP Address>)
LOG_WARN21014<Internal Session ID> Invalid port (<Port>) specified with the port command, port value must be greater than 1024
LOG_WARN21014<Internal Session ID> Invalid ip-addr (<IP Address>) used to connect to listening ftp data socket, expected from (<IP Address>)
LOG_ERROR21022Unable to allocate state control block for a session
LOG_ERROR21022Unable  to allocate memory for ftp session
LOG_ERROR21022Out of memory
LOG_ERROR21022<Service IP Address:Port>:Unable to allocate memory for PORT cmd to FTP server
LOG_ERROR21022<Service IP Address:Port>:Unable to allocate memory for  SSL verbs
LOG_ERROR21023Unable to get an active back-end server 
LOG_ERROR21024Failed to create new socket
LOG_ERROR21024Failed to create SSL socket
LOG_ERROR21024Failed to create ssl client socket for data connection
LOG_ERROR21025Unable to bind a server for data connection
LOG_ERROR21025Unable to setup data connection
LOG_ERROR21026Failed to connect to FTP server
LOG_ERROR21026Unable to establish SSL control connection with the FTP server
LOG_ERROR21026Unable to connect to FTP server <Server IP Address>
LOG_ERROR21027Unable to accept SSL connection from FTP client
LOG_ERROR21028Failed to send response to the client
LOG_ERROR21028Failed to send control data to the server, because of small TCP windows
LOG_ERROR21028Failed to send data to the FTP client on the data connection
LOG_ERROR21029Failed to receive data from the FTP client on the data connection
LOG_ERROR21029Failed to receive data from FTP server on the data connection
LOG_ERROR21030Received bad response codes from the FTP server
Compression (COMPRESS)
LOG_ERROR24001Compression request errored, <Error Code>, <Error String>
LOG_ERROR24006Failed to initialize compression, switching back to no-compression mode
Web Translation (WATREWR)
LOG_ERROR26051Rewrite Module: URL rewrite by both Url-Translation and Request Rewrite
LOG_ERROR26052Rewrite Module: HTTP header rewrite by both URL-translation and Request Rewrite. Please go over your configuration to see if this can be avoided
Network Socket (NET)
LOG_ERROR3001 Failed to attach interface <Interface Name>

3002 System Interface related
LOG_NOTICE3003<Interface Name>: promiscuous mode enabled

3004  3005 System Interface related
LOG_ERROR3011rn_addmask: mask impossibly already in tree
LOG_ERROR3011Mask for route not entered
LOG_ERROR3012rn_delete <node-info>: Orphaned Mask <node-info> at <node-info>
LOG_ERROR3013rn_init: radix functions require max_keylen be set

3014 System Route related

 3021-23  QOS related

 3031-48  NC Sockets related
TCP (NETINET)

4031

4032

 INET IP related
LOG_ERROR4033Can't find virtual host for route, dst = <IP Address>
LOG_NOTICE4034ipflow to <IP Address> reached max refs
LOG_NOTICE4034Copyright (c) 2001, 2002 Barracuda Inc.
LOG_NOTICE4034Copyright (c) 1982, 1986, 1993 The Regents of the University of California

4035 - 4046 INET IP related

4051 - 4053 TCP connections related
LOG_ALERT4054Detected a SYN attack, using SYN cookies

4055 - 4058 TCP connections related

 4071-86 Forwarding related

 4091-99  NATting related

4001  ICMP Redirect
LOG_WARN4011arp request for <IP Address> failed with no memory
LOG_ERROR4013<Host IP Address> is using my IP address <IP Address>
LOG_ERROR4014Failed to find route for arp response to client <IP Address>
LOG_WARN4015arp: <MAC Address> attempts to modify permanent entry for <IP Address> on <Interface Name>
LOG_WARN4016arp_rtrequest: bad gateway value
LOG_ERROR4017arpresolve: can't allocate info for <IP Address>, rt=<route>
LOG_ERROR4017arp_rtrequest: malloc failed

 4111-16 UDP related

 4131-141 ICMP ERRORs related
LOG_ERROR45006Socket between stm wrapper and Configuration agent failed...Cannot execute <command> command
Symmetric Encryp. Decryp. (CRYPTO)
LOG_DEBUG5004Decrypt Failed
Process Monitor (PROCMON)
LOG_WARN44001STM crash detected current state is: <STM State> state <Number> crashes in last <Time in Seconds>
LOG_NOTICE44001Checking if configuration needs to be synchronized with peer system
LOG_NOTICE44001Notifying peer system to check if configuration needs to be synchronized
LOG_WARN44002Total retries: <Number> waiting for <Time in seconds> before next restart
LOG_WARN44003Too many <Number> tries to restart unstable STM, switching to Failed state
LOG_WARN44004Too many STM crashes switching to Unstable state,  will attempt restart in <Time in seconds>
LOG_NOTICE44005Attempting to restart STM and Eventmgr
LOG_NOTICE44006Attempting to recreate the log DB
LOG_ERROR44007Error : <Error code> encountered with stm start
LOG_ERROR44008STM restart failed: switching to Failed state
LOG_ERROR44009STM restart failed: switching to Failed state
LOG_NOTICE44010STM restart succeeded: current state: Stable
LOG_WARN44011shmget failed 
LOG_WARN44012number of stm worker threads is <Number of STM Threads>"
LOG_WARN44013shmread error <Failure Error>
LOG_WARN44014STM worker thread <Number> seems to be hung. Event count <Number>
LOG_WARN44015STM seems to be hung. Killing STM
LOG_NOTICE44016STM alive: switching from <STM State> to stable state
LOG_WARN44017<Process Name> state is <Process State>
LOG_ERROR44018bypass_hbeat.pl is dead restarting gpio and bypass_hbeat
LOG_ERROR44019clamd is dead, restarting <Process Name>
LOG_ERROR44019snmpd is dead, restarting <Process Name>
LOG_ERROR44020profile agent is dead, restarting <Process Name>
LOG_ERROR44021collectd is dead, restarting <Process Name>
LOG_ERROR44022namemon is dead, restarting namemon
LOG_ERROR44023config agent is dead, restarting config_agent and stm
LOG_CRIT44024System highest temp has reached
LOG_CRIT44025System is getting real hot
LOG_CRIT44026System highest temp has reached
LOG_CRIT44027System is getting real hot
LOG_ALERT44028One of the CPU fans is dead
LOG_ALERT44029One of the System fans is dead
LOG_ALERT44030One of the System fans is dead
LOG_ALERT44031Firmware storage exceeds 85%
LOG_ALERT44032Mail storage exceeds 85%
LOG_ALERT44033One of the RAID arrays is degrading.
LOG_NOTICE44034<Interface Name>: link seems down
LOG_ALERT44035<Interface Name>: link is down
LOG_ALERT44036<Interface Name>: link is up
LOG_NOTICE44001Checking if configuration needs to be synchronized with peer system
LOG_NOTICE44001Notifying peer system to check if configuration needs to be synchronized
LOG_ERROR44039heartbeat.pl is dead <Number>, restarting
LOG_ERROR44040heartbeat.pl is in state D for <Number> tick(s). Ignoring the state
LOG_ERROR44041cluster_manager is dead <Number>, restarting
LOG_ERROR44042cluster_manager is in state D for <Number> tick(s). Ignoring the state
LOG_ERROR44042Restarting spinal cord process since there may be an issue in connecting to Control Center
LOG_ERROR44043Restarting ssh
LOG_NOTICE44043Restarting syslog-ng process as it was down
LOG_NOTICE44001Checking if configuration needs to be synchronized with peer system
LOG_ERROR44044Configuration dispatcher is dead <Number>, restarting
LOG_ERROR44045Configuration dispatcher is in state D for <Number> tick(s). Ignoring the state
LOG_ALERT44046STM seems to be running high on Memory. Please contact to Barracuda Networks Support Center for analysis
LOG_ALERT44047Memory Usage exceeds 70%
LOG_NOTICE44048Monitoring links: <Link Name>
LOG_NOTICE44049Started monitoring
LOG_ALERT44050Log storage exceeds 85%
LOG_ALERT44051High CPU Usage
LOG_EMERG44850VNET_CONFIG' @message if $syslog ne 0;
LOG_NOTICE44201Mode change: Hard bypass = <Hard Bypass Enabled> Bypass on Failure = <Soft Bypass Enabled>
LOG_NOTICE44202Mode set to bypass Hard bypass = <Hard Bypass Enabled> Bypass on Failure = <Soft Bypass Enabled>
LOG_NOTICE44203Changing Heartbeat bit state from <Old Hearbeat bit state> to <New Hearbeat bit state>
LOG_NOTICE44204Mode set to never bypass
LOG_ALERT44301Harddisk Failure
LOG_ERROR44701Could not open pdf '<report>' because: $!\n
LOG_ERROR44702Could not open html '<report>' because: $!\n
LOG_ERROR44703Report not sent to <email address>
CLUSTER MANAGER (CLRMGR)
LOG_NOTICE43001We are not yet in cluster mode.  Could not calculate destination IP and destination Identity. Exiting
LOG_NOTICE43001Invalid Role : <PRIMARY/BACKUP:self_role> specified in cluster.conf. Could not determine self role. Exiting
LOG_ERROR43001Cluster.conf file is not existing...Exiting
LOG_ALERT43001Peer device $g_peer_ip is UP
LOG_ALERT43002Peer device $g_peer_ip is UP
LOG_ALERT43003Peer device $g_peer_ip DOWN
LOG_NOTICE43010Self assume received for <operational_mode> mode
Monitor Check (CHECK_MON_LINK)
LOG_ERROR48302Couldn't connect to NTP server: <Server Name/IP Address>
Barracuda Updates (UPDATE)
LOG_ALERT52001Energize update subscription is about to expire in <Number> days
LOG_ALERT52002New attack definition version <Number> is available
LOG_ALERT52003New firmware update is available  Current Version = <current_version>  Beta Version = <beta_version>
LOG_ALERT52004New firmware update is available  Current Version = <current_version> New Version = <new_version>
LOG_ALERT52005Attackdef downloaded and applied on the appliance
LOG_ALERT52006Attackdef downloaded and applied on the appliance
LOG_ALERT52007New Virus definition update available.Current Version = <current_version>. New Version = <new_version>
LOG_ALERT52010New Firmware update available.Current Version = <current_version>. New Version = <new_version>
LOG_ALERT52011New Attack definition update available.Current Version = <current_version>. New Version = <new_version>
LOG_ALERT52012New Virus definition update available.Current Version = <current_version>. New Version = <new_version>.
BYPASS
LOG_ALERT44221Unit is switching to bypass mode
LOG_NOTICE44222State set to bypass: stopping heartbeat
LOG_NOTICE44223State set to normal: starting heartbeat
LOG_NOTICE44201Mode change: Hard bypass = <Hard Bypass Enabled> Bypass on Failure = <Soft Bypass Enabled>
LOG_NOTICE44202Mode set to bypass Hard bypass = <Hard Bypass Enabled> Bypass on Failure = <Soft Bypass Enabled>
LOG_NOTICE44203Changing Heartbeat bit state from <Old Hearbeat Version> to <New Hearbeat Version>
LOG_NOTICE44204Mode set to never bypass
STM_WRAPPER
LOG_WARN45001Cannot execute <Command Name> Command. Exiting.
LOG_WARN45002Configuration agent is not running. Cannot monitor <Command Name> command
LOG_WARN45003command<Command Name> execution status = <Status>
LOG_WARN45004Configuration agent crashed. Failed to execute <Command Name> command
LOG_WARN45005Configuration agent is not running....Cannot execute <Command Name> command
LOG_WARN45006Socket between stm wrapper and Configuration agent failed...Cannot execute <Command Name> command
LOG_ERROR45007Failed to initialize STM
LOG_NOTICE45008Successfully initialized STM
LOG_NOTICE45008Creating db snapshot after initwac
LOG_NOTICE45009Successfully stopped STM
LOG_NOTICE45010<Failure Reason>
LOG_INFO45011Procmon rollback :Loading at <Date> from DB snapshotlast successful digest
LOG_NOTICE45012Rollback finished: success
LOG_ERROR45013Rollback failed : Failed to restart STM
LOG_NOTICE45014<Failure Reason>
LOG_WARN45016Configuration size is <Current Config Size> Bytes which exceeds the <Max Config Size> Bytes safe limit. Please check your configuration.
LOG_WARN45018System in failed state: attempting recovery for config
LOG_ERROR45019STM startup failed. Retrying with blank config
LOG_ERROR45020STM startup failed even with blank config. Exiting
LOG_NOTICE45022Committing UI configuration
LOG_NOTICE45024Killing STM for dumping core
PROCESS SCHEDULE
 LOG_WARN49001Scheduled Backup failed : System has locked key configuration
Stateful Failover (SFO)
LOG_NOTICE25050Opening System State Transfer listening socket
LOG_NOTICE25050Closing System State Transfer listening socket
LOG_NOTICE25050Accepted System State Transfer connection sock
LOG_NOTICE25100Unrecognised state pkt
LOG_NOTICE25100Calling update system state function of module
LOG_NOTICE25100Ignoring System State Transfer packet for unknown module
LOG_NOTICE25150Opening Request State Transfer listening socket
LOG_NOTICE25150Listening for Request State Transfer connections on socket
LOG_NOTICE25150Request State Transfer listening socket
Admin Management
LOG_ALERT51001<user_role> User has logged in
LOG_ALERT51015Unable to reach Barracuda update server. Please check your network connectivity
LOG_ALERT51002LOG Database is corrupted. Please contact Barracuda Support
LOG_ALERT51002Summary Log Database is corrupt. Initializing DB recovery
LOG_ALERT51005Backup failure notification
LOG_ALERT51004FTP of access logs Failed. Reason:<message>
LOG_ALERT51006Performance numbers for this unit is not available <box_model>
LOG_ALERT51009Backup was successfully restored
LOG_WARN51012Disabling reporting as we are connected to BRS
LOG_WARN51012Enabling reporting as we are disconnected from BRS
LOG_WARN51014Unable to reach Barracuda update server in last <time_frame> minutes
LOG_NOTICE51003Error in logging to LOG Database.Please contact Barracuda Support
LOG_NOTICE51013Connectivity to Barracuda update server restored
Configuration Synchronization
LOG_NOTICE53003This configuration change was successfully committed on the peer system
LOG_ERROR53004Failed sync configuration from namemon master node with serial : <namemon_master_node>
LOG_NOTICE53005Starting sync configuration from namemon master node with serial : <namemon_master_node>
LOG_NOTICE53006Completed sync configuration from namemon master node with serial : <namemon_master_node>
LOG_NOTICE53007Not notifying peer devices since bootstrapping is not done yet.
LOG_NOTICE53008Not syncing from best remote node:$best_remote_node since bootstrapping is not done yet