1. A method comprising: at a network device, monitoring an occurrence of an operational message of the network device, the operational message being a syslog message; storing dynamic context information at a time that the operational message occurs; associating the stored dynamic context information with the operational message; and storing in a metalog at least one of a syslog sequence number, a time stamp of the syslog message, an identifier to identify the network device, or a mnemonic to identify the syslog message.