topic Re: No syslog messages in XMC → DeviceView→ Device Logs in ExtremeCloud IQ- Site Engine Management Center

No syslog messages in XMC → DeviceView→ Device Logs

AntonS — Fri, 17 Sep 2021 19:36:20 GMT

Hy,

I cannot see syslog messages in XMC → DeviceView→ Device Logs

Although I can see the messages in /var/log/syslog

what is the correct pattern for Ubuntu x64 Appliance?

my appliance was first deployed with

netsight_appliance_64bit.5.1.0.140

uname -a
Linux netsight01.lsag.net 5.4.0-52-generic #57~18.04.1-Ubuntu SMP Thu Oct 15 14:04:49 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 18.04.5 LTS
Release: 18.04
Codename: bionic

I already tried Ubuntu LINUX Syslog Pattern

and

Ubuntu LINUX Syslog ISO8601/RFC3339 Pattern

still not seeing anything

StephanH — Sat, 18 Sep 2021 11:25:31 GMT

Hello Anton,

are you runnig XIQ-SE as root or as different user?

StephanH — Sat, 18 Sep 2021 11:27:16 GMT

Hello Anton,

if you run as different user check this:

AntonS — Mon, 20 Sep 2021 13:57:51 GMT

hy,

Thank you for your answer! I did not change the user

ps -ef shows only nsftpd and mysql do not run as root user

Every other NetSight process/daemon runs as root

AntonS — Mon, 20 Sep 2021 14:13:07 GMT

I can see the syslog messages in EVENTS tab

The source seems to be the problem.

Does this have to do with wrong pattern?

AntonS — Mon, 20 Sep 2021 18:25:46 GMT

After changing pattern to “NetSight Syslog pattern” it works

But I have some switches that have another ip for management / and syslog source.

On those devices I cannot see the syslog messages in the Device View