EMC VNX Logs -> External Syslog server?

It's a little more involved.  You're talking about two things - 1) sending logs to a SYSLOG server and 2) getting the CIFS auditing logs off the datamover.

To send the syslogs remotely, take a look at the document Configuring and Using the Audit Tool on Celerra and VNX for File.  This details the steps to configure the control station for sending certain logs to a remote syslog service.

The second piece, getting to the CIFS security logs, is discussed in Configuring and Managing CIFS on VNX.  This covers the autoarchiving of the security log, security logging with VDMs, changing the audit policy and moving the security log to a larger filesystem.

Let us know if that helps!

Karl

Take a look at the docs that Karl mentioned

If you mean CIFS auditing – that actually doesn’t go to the data mover log

Perfect, thanks Karl!

Make sure to understand what the audit tool is actually watching – it not the data mover logs and not the security.evt used for CIFS auditing

Hi Karl,

I have a number of VNX Unifies systems, but I only use the block side of them as if they were are block-only models. Does the Configuring and Using the Audit Tool on Celerra and VNX for File document also monitor and send logging information from the block side of my VNX's to my remote syslog server? If not, how do I configure the block side of my VNX's to send to a remote syslog server? I saw a KB article about this that states that the Monitor Station and syslog server need to be on the same host, but in my case they are not.

George.

Hi George when you say monitor station what do you mean.. is its Unisphere Agent?

I am also having same problem Was it resolved for you, if yes can you guide me?

Thanks in advance.

Hi victoremc123,

The term "Monitor Station" came from a KB article I read. I'm presuming it refers to the machine that people use as their centralised management station that the EMC ESRS / call-home software runs on.

No, the issue still has not been resolved for me yet.

George.

Do I have to download the Audit Tool file from somewhere?

Hi Karl

Do I have to download the " Audit Tool" file from somewhere?

Hi,

The VNX downloads are here. https://dell.to/3m8h0pi Which device are you using? Let us know if you have any additional questions.

VNX7600 (Block)

I am looking for a way to connect to the terminal (shell) of the device and make the necessary changes to send reports to the external log server.

Use naviseccli? What are the connection commands ??
Where can I download AUDIT_tool ??

Thanks.

I want to do the same settings on the VNX7600
In any way possible

Hello OMI123,

You will want to connect to your control station to configure this.  Here are a couple of links that maybe of assistance.  https://dell.to/3vURV4i

https://dell.to/3Bkc2d7