Enabling Events to SYSLOG

Question

Hello,

I am trying to setup Group Manger to sent events to our SYSLog server. I have “Send Events to SysLog Servers” enabled, with the servers IP address entered etc. However no events are being sent to my SYSLog server not even any network traffic. No network ports are being blocked.

Are there any known issues about this not working? Does a management port need to be enabled for this to work?

Thanks,

Matt

mreggena · Answer

Yes we are using port 514. I have multiple servers and other devices that are talking to our SYSLog server fine. Its just the SANs that wont talk.

I have done what you suggested but recieved no messages. I had wireshard running but didnt see any traffic from the SANs IP.

Joe S586 · Answer

To add to what Don commented. Also ensure that ALL the “ETH” IP address are open both ways to the syslog server. This includes the Group IP, and each member’s configured ETH interface IP's.

A quick check is to telnet/ssh to each member in the group and use the ping and traceroute command to verify ALL the ETH interfaces can reach the syslog server. Note, when you telnet to a member, use a specific ETH interface IP and NOT the group IP):

Traceroute Example:

To traceroute out each of the specific ETH port interface add a switch to choose the interface IP as shown below:

GrpName>support traceroute -s [ETH port source IP] [destination IP, i.e., your syslog server IP]

(make sure you test each ETH interface combination).

Ping Example:

to ping out of each of the specific ETH port interfaces add the switch to choose the interface IP as shown below:

ping "-I "

(that is a –I as in Capital letter “eye”).

All ETH interfaces IP and the group IP must be able to reach the syslog server.

Also the syslog server must be able to ping/traceroute back to all eth interface (and the group IP address).

-joe

StouF · Answer

Hello Matt, I've the same problem, have you find a solution ? Thanks, Stéphane

EqualLogic

Enabling Events to SYSLOG

Was this post helpful?