https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25336#M2100 Hi, I've got in my demokit environment a strange problem.<BR /> My EMC for some time has worked well as syslog server, but not despite the fact that I see the syslog messages correctly received in the /var/log/syslog file<BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-128207-85qw8c-Capture2_inline.gif"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/3981iC2144E793F75B899/image-size/large?v=v2&amp;px=999" role="button" title="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-128207-85qw8c-Capture2_inline.gif" alt="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-128207-85qw8c-Capture2_inline.gif" /></span></P><BR /> in the Oneview page or in console, these messages are not shown.<BR /> If I made a tcpdump on EMC interface where receive the syslog messages, I see these message:<BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-88554-sd5fmk-Capture2_inline.gif"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/4369iD1DB4BD5116B376D/image-size/large?v=v2&amp;px=999" role="button" title="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-88554-sd5fmk-Capture2_inline.gif" alt="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-88554-sd5fmk-Capture2_inline.gif" /></span></P><BR /> and with netstat -na I see the port 514 correctly open and the syslog process is running.<BR /> I've also tried to made a backup of the EMC server and to install a new one and restore the previous configurations, but the problem still remain.<BR /> How I can debug this problem more in deep for resolve it?<BR /> Thanks Wed, 23 Aug 2017 12:05:00 GMT Antonio_Opromol 2017-08-23T12:05:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25336#M2100 Hi, I've got in my demokit environment a strange problem.<BR /> My EMC for some time has worked well as syslog server, but not despite the fact that I see the syslog messages correctly received in the /var/log/syslog file<BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-128207-85qw8c-Capture2_inline.gif"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/3981iC2144E793F75B899/image-size/large?v=v2&amp;px=999" role="button" title="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-128207-85qw8c-Capture2_inline.gif" alt="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-128207-85qw8c-Capture2_inline.gif" /></span></P><BR /> in the Oneview page or in console, these messages are not shown.<BR /> If I made a tcpdump on EMC interface where receive the syslog messages, I see these message:<BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-88554-sd5fmk-Capture2_inline.gif"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/4369iD1DB4BD5116B376D/image-size/large?v=v2&amp;px=999" role="button" title="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-88554-sd5fmk-Capture2_inline.gif" alt="46241964734d42b9b20740b9ee49a044_RackMultipart20170823-88554-sd5fmk-Capture2_inline.gif" /></span></P><BR /> and with netstat -na I see the port 514 correctly open and the syslog process is running.<BR /> I've also tried to made a backup of the EMC server and to install a new one and restore the previous configurations, but the problem still remain.<BR /> How I can debug this problem more in deep for resolve it?<BR /> Thanks Wed, 23 Aug 2017 12:05:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25336#M2100 Antonio_Opromol 2017-08-23T12:05:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25337#M2101 Did you add syslog to the event viewer ?<BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="1f5bf7423bbc4a5cb431ddeb56a1ea27_1760-i0wguy_inline.jpg"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/1847i55292BC603B8A098/image-size/large?v=v2&amp;px=999" role="button" title="1f5bf7423bbc4a5cb431ddeb56a1ea27_1760-i0wguy_inline.jpg" alt="1f5bf7423bbc4a5cb431ddeb56a1ea27_1760-i0wguy_inline.jpg" /></span></P><BR /> Wed, 23 Aug 2017 12:10:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25337#M2101 OscarK 2017-08-23T12:10:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25338#M2102 Yes, of course in the event viewer I've select to see the syslog messages.<BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="7771b1bdceef48d992288f0309f39128_RackMultipart20170823-28225-l2q6ho-Capture2_inline.gif"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/5iB2D5995D36015DFF/image-size/large?v=v2&amp;px=999" role="button" title="7771b1bdceef48d992288f0309f39128_RackMultipart20170823-28225-l2q6ho-Capture2_inline.gif" alt="7771b1bdceef48d992288f0309f39128_RackMultipart20170823-28225-l2q6ho-Capture2_inline.gif" /></span></P><BR /> <BR /> Wed, 23 Aug 2017 12:26:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25338#M2102 Antonio_Opromol 2017-08-23T12:26:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25339#M2103 Hi Antonio,<BR /> <BR /> Can you check below KB , if it works ?<BR /> <BR /> <A href="https://gtacknowledge.extremenetworks.com/articles/Solution/Netsight-Console-displays-no-Syslog-events-in-Syslog-tab" target="_blank" rel="nofollow noreferrer noopener">https://gtacknowledge.extremenetworks.com/articles/Solution/Netsight-Console-displays-no-Syslog-even...</A><BR /> <BR /> Thanks,<BR /> Suresh.B<BR /> <BR /> Wed, 23 Aug 2017 12:26:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25339#M2103 Bharathiraja__S 2017-08-23T12:26:00Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25340#M2104 Hi Bharathiraja,<BR /> I've found the problem was infact due to an error setting in the syslog alarm manager where the path were set to /var/log/messages instead to /var/log/syslog<BR /> <P class="fancybox-image"><span class="lia-inline-image-display-wrapper" image-alt="6b9388d882f8428a9633c304cbcafbce_RackMultipart20170823-95659-m703dl-Capture2_inline.gif"><img src="https://community.extremenetworks.com/t5/image/serverpage/image-id/2802i78ED5137D9706FF5/image-size/large?v=v2&amp;px=999" role="button" title="6b9388d882f8428a9633c304cbcafbce_RackMultipart20170823-95659-m703dl-Capture2_inline.gif" alt="6b9388d882f8428a9633c304cbcafbce_RackMultipart20170823-95659-m703dl-Capture2_inline.gif" /></span></P><BR /> <BR /> The strange is why tis path is changed for some reason (for several time the syslog has worked without problem).<BR /> <BR /> Wed, 23 Aug 2017 12:38:00 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/emc-8-0-3-syslog-received-in-var-log-syslog-file-but-now-shown/m-p/25340#M2104 Antonio_Opromol 2017-08-23T12:38:00Z