Unsolved
This post is more than 5 years old
11 Posts
0
20761
EMC VNX Logs -> External Syslog server?
Does anyone know how to pull the logs off a VNX to an external syslog server?
Specifically I would like to pull the Datamover CIFS security logs off.
Clicking through Unisphere, I'm not seeing the option?
Thanks in advance,
Jon
.
umichklewis
1.2K Posts
0
June 25th, 2013 07:00
It's a little more involved. You're talking about two things - 1) sending logs to a SYSLOG server and 2) getting the CIFS auditing logs off the datamover.
To send the syslogs remotely, take a look at the document Configuring and Using the Audit Tool on Celerra and VNX for File. This details the steps to configure the control station for sending certain logs to a remote syslog service.
The second piece, getting to the CIFS security logs, is discussed in Configuring and Managing CIFS on VNX. This covers the autoarchiving of the security log, security logging with VDMs, changing the audit policy and moving the security log to a larger filesystem.
Let us know if that helps!
Karl
Rainer_EMC
8.6K Posts
0
June 25th, 2013 09:00
Take a look at the docs that Karl mentioned
If you mean CIFS auditing – that actually doesn’t go to the data mover log
jonderrenbacker
11 Posts
0
June 26th, 2013 12:00
Perfect, thanks Karl!
Rainer_EMC
8.6K Posts
0
June 26th, 2013 13:00
Make sure to understand what the audit tool is actually watching – it not the data mover logs and not the security.evt used for CIFS auditing
glparker_e38cb2
58 Posts
0
September 29th, 2013 16:00
Hi Karl,
I have a number of VNX Unifies systems, but I only use the block side of them as if they were are block-only models. Does the Configuring and Using the Audit Tool on Celerra and VNX for File document also monitor and send logging information from the block side of my VNX's to my remote syslog server? If not, how do I configure the block side of my VNX's to send to a remote syslog server? I saw a KB article about this that states that the Monitor Station and syslog server need to be on the same host, but in my case they are not.
George.
victoremc123
9 Posts
0
October 3rd, 2013 09:00
Hi George when you say monitor station what do you mean.. is its Unisphere Agent?
I am also having same problem Was it resolved for you, if yes can you guide me?
Thanks in advance.
glparker_e38cb2
58 Posts
0
October 3rd, 2013 17:00
Hi victoremc123,
The term "Monitor Station" came from a KB article I read. I'm presuming it refers to the machine that people use as their centralised management station that the EMC ESRS / call-home software runs on.
No, the issue still has not been resolved for me yet.
George.
OMI123
4 Posts
0
October 22nd, 2021 15:00
Do I have to download the Audit Tool file from somewhere?
OMI123
4 Posts
0
October 22nd, 2021 15:00
Hi Karl
Do I have to download the " Audit Tool" file from somewhere?
DELL-Josh Cr
Moderator
Moderator
•
8.7K Posts
1
October 22nd, 2021 17:00
Hi,
The VNX downloads are here. https://dell.to/3m8h0pi Which device are you using? Let us know if you have any additional questions.
OMI123
4 Posts
0
October 28th, 2021 07:00
VNX7600 (Block)
I am looking for a way to connect to the terminal (shell) of the device and make the necessary changes to send reports to the external log server.
Use naviseccli? What are the connection commands ??
Where can I download AUDIT_tool ??
Thanks.
OMI123
4 Posts
0
October 28th, 2021 08:00
I want to do the same settings on the VNX7600
In any way possible
DELL-Sam L
Moderator
Moderator
•
7.1K Posts
0
October 28th, 2021 15:00
Hello OMI123,
You will want to connect to your control station to configure this. Here are a couple of links that maybe of assistance. https://dell.to/3vURV4i
https://dell.to/3Bkc2d7