If you want the ITCAM Agent for WebSphere DataPower Appliance
to monitor the system logs of the WebSphere DataPower appliance, in
addition to setting up the syslog on the appliance, you must also
enable syslog on the computer that hosts the ITCAM Agent for WebSphere
DataPower Appliance.
About this task
If the ITCAM Agent for WebSphere DataPower Appliance is installed
on a computer that runs a Windows operating system, you must first
install a system log daemon on the computer to collect the system
logs, or save the system logs files on a shared disk and ensure that
the agent has the authority to read the system log files on that disk.
Procedure
- For example, if the computer that hosts the ITCAM Agent
for WebSphere DataPower Appliance runs Red Hat Enterprise Linux 5
as an operating system, compelete the following steps to enable syslog:
- Run the following command to open the syslog.conf file:
vi /etc/syslog.conf
- Append the following command to the end of the syslog.conf file and save it:
Syslog_fac.* /var/log/filename
Where Syslog_fac is the syslog facility and filename is the name of the file where you save the syslog.
- Run the following command to open the syslog.conf file:
vi /etc/syslog.conf
- Change the value of the SYSLOGD_OPTIONS parameter to the following: SYSLOGD_OPTIONS
= "-m 0 -r"
Note: Depending on the Linux distribution, this
variable might also be named SYSLOGD_PARAMS.
- Restart the syslog server by running the following command:
service syslog restart
- If the computer that hosts the ITCAM Agent for WebSphere
DataPower Appliance runs SUSE Linux Enterprise Server 10 as an operating
system, complete the following steps to enable syslog-ng:
- Run the following command to open the syslog file:
vi /etc/sysconfig/syslog
- Verify that the value of the SYSLOG_DAEMON parameter is syslog-ng.
- Append the following line to the definition of the src source in the syslog-ng.conf file: tcp(ip("ip_address") port(port_number) keep-alive(yes)); Where ip_address is the IP address of the computer that
hosts the ITCAM Agent for WebSphere DataPower Appliance and port_number is the port number that is used for receiving syslog-ng messages.
- In the syslog-ng.conf file, create
a filter to filter messages from the DataPower appliances. For example,
the filter statement filter f_dp {level(debug..emerg) and
facility(user);}; defines a filter that accepts messages
that are from the debug level to the emergency level and has user as the syslog facility.
- In the syslog-ng.conf file, use
a destination statement to define where the messages are written.
For example, the destination statement destination dplog
{file("/var/log/dpsyslog.log");}; specifies that messages
are written to the dpsyslog.log file in the /var/log directory.
- In the syslog-ng.conf file, use
a log statement to connect sources and destinations. For example,
the log statement log {source(src);filter(f_dp);destination(dplog);}; connects the src source and the dplog destination.
- Save the syslog-ng.conf file.
- Restart the syslog server by running the following command:
/etc/init.d/syslog restart
What to do next
Important: Large syslog file lead to high CPU
usage. To avoid this problem it is important to ensure that syslog
files are consistently rotated, to configure syslog file rotation
on Linux systems use the logrotate and cron service. On AIX systems
configure the /syslog.conf file.