I do need some assistance. The idracs on our servers are not sending any remote syslog. The following has been done from reading the idrac documentation: 1. Overview - Server - Logs - Remote Syslog enabled, correct IP inserted into 'Syslog Server1'. 2. Overview - Server - Alerts - alerts enabled, all alerts filters ticked, most of the 'Remote system log' checkboxes ticked under 'Alerts & remote system log configuration'. 3. Events triggered to produce something in the idrac syslog. 4. My network team report that the 'flow sessions'from the idrac server are empty. 5. idrac firmware updated to 2.61.60.60. 6. Settings checked against the syslog settings on the other idrac server
Remote server is running on the same network as iDRAC and the iDRAC is enterprise so remote syslog is allowed.
I can only think of about that it can be routing problem but I am not sure where I can find the routing table ?
Maybe you can help what can be the problem or point me to the right direction.
It looks like you have performed the steps necessary to enable remote syslog. I suggest reviewing everything again.
Verify iDRAC Enterprise license is being used in Overview>Server>Licenses
Enable remote syslog, enter IP of remote server, and enter port in Overview>Server>Logs>Settings
Configure alerts to send to remote syslog in Overview>Server>Alerts
Enable alerts in Overview>Server>Alerts
Make sure that you use the apply button on each page after changing settings. If you continue having issues then I suggest updating the iDRAC/LCC firmware to the latest.
I've done everything which you pointed at. The firmware was already updated to the newest one. License is good, port and other configuration seems to ok.
I tried to test it in Test even field. I found some IDs:
So I inserted TST into the Msg ID box on the Overview – Server – Alerts page and clicked the Test button and it gave an error:
System Alert
RAC0211: Apply failed
Not sure if I've done something wrong or the ID was wrong ?
Remote syslog is not working. I tried to test it but without any luck.
I've done everything from the manual and also what Dell engineer pointed at. The firmware was already updated to the newest one. License is good, port and other configuration seems to ok.
I tried to test it in Test even field. I found some IDs:
So I inserted TST into the Msg ID box on the Overview – Server – Alerts page and clicked the Test button and it gave an error:
System Alert
RAC0211: Apply failed
Not sure if I've done something wrong or the ID was wrong ?
Any updates on this issue? I see its a few years old. But we are running into the same issue. From a firewall perspective it shows no traffic being transmitted. Yet it works fine for other hosts that are not DELL in the same vlan segment. iDRAC is configured as expected.
Hello if you could share the situation you're dealing with in detail, that would be helpful for us to assist you further. You can also share your service tag if you like, through https://www.dell.com/community/en/direct-messaging as it contains basic information on your system. "From a firewall perspective it shows no traffic being transmitted" -> if iDRAC generates syslog traffic and firewall can see it.
Respectfully,
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!
Daniel My
12 Elder
•
6205 Posts
7048
0
Posted May 30th, 2019 09:00
Hello
It looks like you have performed the steps necessary to enable remote syslog. I suggest reviewing everything again.
Make sure that you use the apply button on each page after changing settings. If you continue having issues then I suggest updating the iDRAC/LCC firmware to the latest.
Thanks