topic RE: Syslogs send by Summit-Switch are not displayed in Netsight Syslog in ExtremeCloud IQ- Site Engine Management Center

Syslogs send by Summit-Switch are not displayed in Netsight Syslog

Chacko — Fri, 27 Jan 2017 19:30:00 GMT

I configured a X460 with syslog, as stated in https://extremeportal.force.com/ExtrArticleDetail?an=000074214 - everything works fine, in Netsight Alarms and Events, I can see the syslogs of this device.
Exactly the same configuration doesn't work with X440.

In our firewall system I can see, that syslog traffic is send to NetSight, but they won't appear.
Do I need to configure something in Netsight or where is the problem?

RE: Syslogs send by Summit-Switch are not displayed in Netsight Syslog

Ronald_Dvorak — Fri, 27 Jan 2017 23:27:00 GMT

I'd check on EMC/Netsight directly.
New messages should be written in the file /var/logs/syslog

If you ssh into EMC you'd do a "tail -f /var/log/syslog" to see new incoming messages.
Do that and and force some syslog message from the X440 and let us know whether you'd see that in the CLI output.

RE: Syslogs send by Summit-Switch are not displayed in Netsight Syslog

Chacko — Fri, 27 Jan 2017 23:27:00 GMT

Hm, strange.
The firewall can see, that syslog traffic is routed to our Netsight, but nothing is shown inside the syslog-file - so neither in the Console/OneView.
This is the switch-configuration:
I connected a device and with the booting, there are logs for netlogin, vlan, etc.
Log Target : syslog; 1.2.3.4:514 (vr VR-Default), local0 Enabled : yes Filter Name : DefaultFilter Match regex : Any Severity : Info (through Critical) Format : PRI Mmm DD HH:MM:SS HOSTNAME TAG: Does anyone has suggestions?
Other switches are working fine with the same config (X440, X460, X670...).
IP connectivity is given, otherwise the firewall wouldn't see passing syslog-packets.
Seems to be an Netsight related issue.

RE: Syslogs send by Summit-Switch are not displayed in Netsight Syslog

Chacko — Fri, 27 Jan 2017 23:27:00 GMT

Update: After performing a tcpdump on the NetSight I can see, that the syslogs are received by NetSight, but nothing is shown in the syslog-file - further ideas?

RE: Syslogs send by Summit-Switch are not displayed in Netsight Syslog

Chacko — Wed, 15 Feb 2017 19:38:00 GMT

Problem solved - https://community.extremenetworks.com/extreme/topics/netsight-syslog-source-ip-is-missing (thanks again to OscarK for the hint)