I have an odd behaviour of one of our XI50 boxes
I use the following Log target
Target Type : syslog
Local Identifier : myidentifier
Remote Host : IP@ syslog daemon
Remote Port : 514
Local IP Address : local IP@
syslog Facility : local7
Rate Limit : 100
Feedback Detection : off
Identical Event Detection : off
Messages received by the syslog server always display local IP@, not "myidentifier". I can change the IP@ by another local IP@ and it reflects in the messages.
Another XI50 box ( production ) works fine, i.e it gives "myidentifier"
Both are running 188.8.131.52
Any ideas ?
Specify a descriptive string that identifies the log target to remote recipients. For syslog destinations, do not include spaces.
This topic has been locked.
7 replies Latest Post - 2012-11-27T19:52:26Z by SystemAdmin
Pinned topic syslog and local identifier
Answered question This question has been answered.
Unanswered question This question has not been answered yet.
Updated on 2012-11-27T19:52:26Z at 2012-11-27T19:52:26Z by SystemAdmin
nmmanisk 2700025H0W16 PostsACCEPTED ANSWER
Re: syslog and local identifier2012-02-08T16:14:51Z in response to kepaHi kepa,
Whether or not to use the local identifier is up to the server. You should check to see that your development/test environment's syslog server is configured to honor the local-identifier/hostname of the syslog client (DataPower). By default, some server implementations may not honor this field. Comparing the server configuration to your production server, which works, may be helpful.
Ramsyee 270003BRTH122 PostsACCEPTED ANSWER
Re: syslog and local identifier2012-02-09T00:47:39Z in response to kepaHi
1)Please delete the log target if possible and create a new one.
2)I assume that you are not using the same identifier, if you are using same
i will suggest you to create a new identifier(which should be differnt Dp-sytbox .
Re: syslog and local identifier2012-11-27T14:27:51Z in response to RamsyeeI believe Ramsyee is pointing if and only if one is using the same syslog server. We can definitely have the same local identifier if utilize the different syslog servers...
As Nicholas suggested we'd need to check the configurations on the syslog server for this
Re: syslog and local identifier2012-11-27T00:47:29Z in response to kepaRegarding the Local IP or Alias of the appliance in syslog, does this mean the management IP/alias or another NIC with only application traffic, being the traffic I am concerned with?
Trey 120000BTRN222 PostsACCEPTED ANSWER
Re: syslog and local identifier2012-11-27T01:31:48Z in response to SystemAdminHey Kirby,
Yes similar to the MQ FSH use of a local ip, the source ip the syslog events are issued from. Just like all tcp/ip connections you have the source ip and destination ip. This field allows you to define the source ip.
As always .. test to make sure all behaves as expected and if you run into problems or misbehavior open a pmr and ill be glad to dig in and help.