ExtremeCloud IQ- Site Engine & Extreme Management Center

Expand all | Collapse all

Syslog entries missing in XMC Events window

  • 1.  Syslog entries missing in XMC Events window

    Posted 03-11-2019 14:15
    Just upgraded to XMC 8.2.4.42 and was hoping it would fix the issue with my syslog events now showing in the Events window. If I go to the Syslogs folder on the server I see them there but for some reason they are not getting replicated to the Event window.


  • 2.  RE: Syslog entries missing in XMC Events window

    Posted 03-11-2019 14:22
    Here my 8.2 view which incl Syslog messages....

    -Ron



  • 3.  RE: Syslog entries missing in XMC Events window

    Posted 03-11-2019 14:49
    This is all I have and I have over 130 switches setup to send syslog info to XMC.



  • 4.  RE: Syslog entries missing in XMC Events window

    Posted 03-11-2019 15:17
    Just in case my syslog config and the output of the show command of my X440G2 running 22.6.1.4.

    X440G2.7 # show config | i syslog
    configure syslog add 172.24.24.110:514 vr VR-Default local0
    enable log target syslog 172.24.24.110:514 vr VR-Default local0
    configure log target syslog 172.24.24.110:514 vr VR-Default local0 filter DefaultFilter severity Info
    configure log target syslog 172.24.24.110:514 vr VR-Default local0 match Any
    configure log target syslog 172.24.24.110:514 vr VR-Default local0 format timestamp seconds date Mmm-dd event-name none priority host-name tag-name

    X440G2.8 # sh log configuration target syslog
    Log Target : syslog; 172.24.24.110:514 (vr VR-Default), local0
    Enabled : yes
    Filter Name : DefaultFilter
    Match regex : Any
    Severity : Info (through Critical)
    Format : PRI Mmm DD HH:MM:SS HOSTNAME TAG:
    Port Type : UDP


  • 5.  RE: Syslog entries missing in XMC Events window

    Posted 03-11-2019 16:01
    I had also no syslog entries under Events.
    I had to configure in Event Configuration - Event Logs - Syslog the correct Directory.
    /var/log/syslog and Ubuntu LINUX Syslog Pattern.
    In my case here was /var/log/Messages and RedHad.
    After this Change the syslog entries appear


  • 6.  RE: Syslog entries missing in XMC Events window

    Posted 03-11-2019 16:38
    code:
    * Switch.2 # show config | i syslog
    configure syslog add 10.230.30.21:514 vr VR-Default local7
    enable log target syslog 10.230.30.21:514 vr VR-Default local7
    configure log target syslog 10.230.30.21:514 vr VR-Default local7 filter DefaultFilter severity Debug-Data
    configure log target syslog 10.230.30.21:514 vr VR-Default local7 match Any
    configure log target syslog 10.230.30.21:514 vr VR-Default local7 format timestamp seconds date Mmm-dd event-name none priority tag-name

    * Switch.3 # sh log config target syslog
    Log Target : syslog; 10.230.30.21:514 (vr VR-Default), local7
    Enabled : yes
    Filter Name : DefaultFilter
    Match regex : Any
    Severity : Debug-Data (through Critical)
    Format : PRI Mmm DD HH:MM:SS TAG:

    Our configs look close so I don't think that is the issue. This is a windows machine and the default directory is

    Syslog
    Directory C:\Program Files\Extreme Networks\NetSight\appdata\logs/syslogs polled every 60 seconds


  • 7.  RE: Syslog entries missing in XMC Events window

    Posted 03-11-2019 18:52


    Is that a typo in the link / instead of \ ?!


  • 8.  RE: Syslog entries missing in XMC Events window

    Posted 03-12-2019 13:27
    No, that is how it is in the config for all modules. Screen shot included below.



  • 9.  RE: Syslog entries missing in XMC Events window

    Posted 03-12-2019 18:48
    I found the following article that explains after upgrading to 8.2 you need to clear your browsers cache to see all the events.

    https://gtacknowledge.extremenetworks.com/articles/Solution/xmc-Filters-ignored-in-the-Event-tab-after-upgrade-to-v8-2

    I did this and now all my Syslogs are showing in the events tab.