Just a share from working with Jtac on getting both neighbor up and down events logged. Before I was only getting logs of RPD_OSPF_NBRDOWN in my logs
root@d15-41# show system syslog
file messages {
any notice;
authorization info;
daemon info;
Now i get the following
OSPF neighbor 10.9.9.9 (realm ospf-v2 irb.999 area 0.0.0.1) state changed from Full to Down due to InActiveTimer (event reason: %DAEMON-5: BFD session timed out and neighbor was declared dead)
OSPF neighbor 10.9.9.9 (realm ospf-v2 irb.999 area 0.0.0.1) state changed from Init to ExStart due to 2WayRcvd (event reason: %DAEMON-6: neighbor detected this router)
OSPF neighbor 10.9.9.9 (realm ospf-v2 irb.999 area 0.0.0.1) state changed from Exchange to Full due to ExchangeDone (event reason: %DAEMON-6: DBD exchange of slave completed)