This feature allows the logging of packets matching deny rules in ingress ACLs applied on subinterfaces. This behavior can be enabled by using the log keyword when configuring an ACL deny rule. A copy of the packet matching those ACL rules is sent to the control plane, where a syslog entry of the packet header is being generated.

The EOS Event Manager feature, introduced in 4.17.0F,  provides the ability to specify a condition and an action

This feature allows the logging of the packets matching permit rules in ingress ACLs. This behavior can be enabled by using the log keyword when configuring an ACL permit rule. A copy of the packet matching those ACL rules is sent to the control plane, where a syslog entry of the packet header is being generated.

This feature adds TLS support to the existing syslog logging mechanism. With the new added CLI commands, the user can