Topic
  • 3 replies
  • Latest Post - ‏2013-01-31T22:18:57Z by HermannSW
SystemAdmin
SystemAdmin
6772 Posts

Pinned topic Issue with LogTarget - Syslog

‏2013-01-24T20:40:21Z |
Hi Guys,

I am facing an issue with logTarget ( rather weird one, I should say).
Firmware - 3.8.1.20

1. I have custom event(log) category 'mqDuration'
2. I have 3 Log targets subscribing to above category with priority as NOTICE.
3. XSLT generates mqDuration event with NOTICE priority.

So far so good.

Now,
4. 3 Log Targets for this event are
a. syslog - TargetType = Syslog
b. file( local file) - targetType=File
c. SNMP - targetType=SNMP
5. Out of these 3, FILE and SNMP log targets BOTH are receiving events and are logging it.
6. BUT 'syslog' log Targe is NOT receiving any event.

Other settings for sysLog target
FeedBack detection - OFF
Identical Event Detection- ON and suppression period=60
syslog Facility - USER.

The frequency of 'mqDuration' log category is very HIGH, almost every second.
I understand that identical events will be suppressed till 60 seconds, but there SHOULD be atleast ONE entry every minute.
But on the syslog - I DO NOT see any entry for said log category.

Possibilities-
1. As syslog is UDP - it MAY be dropping few events (delivery is not guaranteed ) but FEW; how come nothing is getting logged?
2. remote Syslog server is filtering events at its side. As the event category in the question is of priority 'NOTICE', could it be the case that syslog filters these events???

Also, what does syslog Facity (set at 'user') mean - does it has anything to do with dropping events.

NOTE - we DO NOT have any event filters/object filters or IP address filters setup.

Kindly suggest/guide.
Updated on 2013-01-31T22:18:57Z at 2013-01-31T22:18:57Z by HermannSW
  • SystemAdmin
    SystemAdmin
    6772 Posts

    Re: Issue with LogTarget - Syslog

    ‏2013-01-24T20:41:59Z  
    FYI - other log categories that we have subscribed are getting logged to SYSLOG log target.
  • SystemAdmin
    SystemAdmin
    6772 Posts

    Re: Issue with LogTarget - Syslog

    ‏2013-01-31T21:35:01Z  
    FYI - other log categories that we have subscribed are getting logged to SYSLOG log target.
    any thoughts??
  • HermannSW
    HermannSW
    4647 Posts

    Re: Issue with LogTarget - Syslog

    ‏2013-01-31T22:18:57Z  
    any thoughts??
    Please upgrade your firmware to a supported level, 3.8.1.x firmware went end of service last December, and you cannot raise PMRs against 3.8.1 anymore.
    If the problem still exists on supported firmare, please create a PMR.
    It seems nobody can help just based on what you did state.
    Level2 support will collect your config and other data needed to decided whether it is a configuration issue or a bug.

     
    Hermann<myXsltBlog/> <myXsltTweets/>