Connectrix：系统日志转发已启用，但未发送到 Splunk 服务器

Summary: 已启用 auditCfg （--class， --enabled --show） 设置，但不会将系统日志信息发送到 Splunk 服务器。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

在 Brocade 交换机上启用了要发送到 Splunk 服务器的系统日志转发功能，但是系统日志信息并不会发送。

 

Cause

** SOMEONE SET THE RASLOG QUIET TIME FOR AUDITCFG BACK IN OCT **

Thu Oct 25 06:43:54 2018         admin, , xxx.xx.xx.x, rasadmin --quiet -enable 3
Thu Oct 25 06:44:02 2018         admin, , xxx.xx.xx.x, rasadmin --quiet -show

** HERE IS THE CONFIG FILE FROM non-working **

auditlog.quiettime.dow:FOREVER
auditlog.quiettime.enable:1
auditlog.quiettime.endtime:NA
auditlog.quiettime.starttime:NA
snmp.auditInterval:60
audit.cfg.class:2,4,10
audit.cfg.severity:4

audit.cfg.state:1

*** HERE IS THE CONFIGSHOW FROM working ***

auditlog.quiettime.dow:NA
auditlog.quiettime.enable:0
auditlog.quiettime.endtime:NA
auditlog.quiettime.starttime:NA
snmp.auditInterval:60
audit.cfg.class:2,10
audit.cfg.severity:3
audit.cfg.state:1

 

Resolution

客户可以使用以下命令允许系统日志转发到 splunk。

rasadmin --quiet -disable 3

 

Affected Products

Connectrix DS-6610B

Products

Connectrix DS-6610B
Article Properties
Article Number: 000057296
Article Type: Solution
Last Modified: 21 Oct 2025
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.