| Purpose | Regex Pattern | Style | | :--- | :--- | :--- | | Warning Syslog | %[A-Z]*-3- (Matches any level 3 syslog) | Yellow text, Bold | | Duplex Mismatch | duplex mismatch|auto-negotiation | Orange text | | CPU Spike | %CPU|high utilization|process= | Yellow background, Black text | | Link Flapping | link state.*?down.*?up (Regex for quick flaps) | Yellow text |
Only enable the IP regex rule when running show ip route or show access-list . For general logs, it might highlight too many false positives (like decimal numbers). Create two separate highlight sets – one for "config review" and one for "log monitoring." Category 5: Cisco Specific Debug & Syntax (Gray/White) These highlight the structure of Cisco CLI, making it scannable. xshell highlight sets cisco
A single, powerful regex can color-code the severity level. | Purpose | Regex Pattern | Style |
BGP neighbor 10.0.0.1 remote AS 65001 BGP neighbor 10.0.0.1 state Idle BGP neighbor 10.0.0.1 uptime 00:00:00 % BGP-3-NOTIFICATION sent to 10.0.0.1 (hold time expired) You have to read every line. A single, powerful regex can color-code the severity level
Download the sample Cisco Highlight Set regex table from this article. Configure it during your next maintenance window. Then, run show log on your core router and watch the data transform before your eyes.