How to increase syslog size in Netsight?


Userlevel 4
Hello, everybody!

I have Netsight 6.3, 12 Extreme switches and 10 CISCOs. Extremes are configured to send logs to Netsight. Everything works fine, but it seems like the log is shrinked automatically, because it I can see events for about last 8 hours.

Could I configure how long syslog data in Netsight is stored?

Many thanks in advance,

Ilya

8 replies

Userlevel 7
As per the below post the log is rotated every 24 hours.

https://gtacknowledge.extremenetworks.com/articles/Q_A/How-does-NetSight-use-syslog-files
Userlevel 5
Ilya,

Adding to Ronald's post, the following KB Article might help you in Increasing Syslog data capacity on a Netsight Server on a Windows Platform

https://gtacknowledge.extremenetworks.com/articles/How_To/Increasing-Syslog-data-capacity-on-a-Netsi...
Userlevel 7
Ilya,

did that solve your issue - because if I unterstand it correctly that would only increase the max file size but still the log would get rotated every 24hours = you'd only see Syslog messages of the current day in the console/EMC view.

-Ron
Userlevel 4
Ron wrote:

Ilya,

did that solve your issue - because if I unterstand it correctly that would only increase the max file size but still the log would get rotated every 24hours = you'd only see Syslog messages of the current day in the console/EMC view.

-Ron

Hello, Ron!

I have just applied the solution which Vellachery, Sumeesh recommended above. So, it needs some time to check how it really works. I will share my results with the community.

Thank you!
Userlevel 4
Ron wrote:

Ilya,

did that solve your issue - because if I unterstand it correctly that would only increase the max file size but still the log would get rotated every 24hours = you'd only see Syslog messages of the current day in the console/EMC view.

-Ron

I've checked it.

Unfortunately, I can only see log messages for the last 24 hours.
Userlevel 7
Ron wrote:

Ilya,

did that solve your issue - because if I unterstand it correctly that would only increase the max file size but still the log would get rotated every 24hours = you'd only see Syslog messages of the current day in the console/EMC view.

-Ron

I'd open a ticket - someone in the NMS group should know which file includes the configuration to set the log rotate to a value > 1 day.
Userlevel 6
Ron wrote:

Ilya,

did that solve your issue - because if I unterstand it correctly that would only increase the max file size but still the log would get rotated every 24hours = you'd only see Syslog messages of the current day in the console/EMC view.

-Ron

Hi Ron,

do you open the GTAC case - after one month you should get a solution ...

Regards
Userlevel 6
NetSight Linux syslog log rotation is controlled by the "logrotate" utility on the box. By default the /etc/logrotate.d/rsyslog is set to rotate daily.

If you want to modify this file you can set it to "weekly" "yearly" or you can set a specified size that is used to determine when the log is rotated with the "size" command.

The /etc/logrotate.d/rsyslog file does not look to be rewritten on upgrade of the software, so the modifications should be permanent.

For more information on options for the logrotate utility:
http://www.linuxcommand.org/man_pages/logrotate8.html

This is a linux server correct?

Thanks
-Ryan

Reply