Syslogs send by Summit-Switch are not displayed in Netsight Syslog

  • 0
  • 1
  • Question
  • Updated 1 year ago
  • Answered
  • (Edited)
I configured a X460 with syslog, as stated in https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-a-syslog-server - everything works fine, in Netsight Alarms and Events, I can see the syslogs of this device.
Exactly the same configuration doesn't work with X440.

In our firewall system I can see, that syslog traffic is send to NetSight, but they won't appear.
Do I need to configure something in Netsight or where is the problem?
Photo of Chacko

Chacko

  • 1,206 Points 1k badge 2x thumb

Posted 1 year ago

  • 0
  • 1
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 45,286 Points 20k badge 2x thumb
I'd check on EMC/Netsight directly.
New messages should be written in the file /var/logs/syslog

If you ssh into EMC you'd do a "tail -f /var/log/syslog" to see new incoming messages.
Do that and and force some syslog message from the X440 and let us know whether you'd see that in the CLI output.
Photo of Chacko

Chacko

  • 1,206 Points 1k badge 2x thumb
Hm, strange.
The firewall can see, that syslog traffic is routed to our Netsight, but nothing is shown inside the syslog-file - so neither in the Console/OneView.
This is the switch-configuration:
I connected a device and with the booting, there are logs for netlogin, vlan, etc.
Log Target       : syslog; 1.2.3.4:514 (vr VR-Default), local0
    Enabled      : yes
    Filter Name  : DefaultFilter
    Match regex  : Any
    Severity     : Info (through Critical)
    Format       : PRI Mmm DD HH:MM:SS HOSTNAME TAG:
Does anyone has suggestions?
Other switches are working fine with the same config (X440, X460, X670...).
IP connectivity is given, otherwise the firewall wouldn't see passing syslog-packets.
Seems to be an Netsight related issue.
Photo of Chacko

Chacko

  • 1,206 Points 1k badge 2x thumb
Update: After performing a tcpdump on the NetSight I can see, that the syslogs are received by NetSight, but nothing is shown in the syslog-file - further ideas?
(Edited)
Photo of Chacko

Chacko

  • 1,206 Points 1k badge 2x thumb