Follow

Forwarding hardware logs to a remote server

To forward logs to a remote server, these actions must be performed on each controller whose logs are being forwarded: each network controller/SDN Router, each compute node, and each storage node (both active and passive).

  1. On the Hardware page, click the "..." beside the controller and click "Connect to Console" (for all hardware except the network controller), or SSH into the controller.  The user is "manager", and the password is the one chosen when the hardware was registered
  2. Run sudo su and re-enter the manager password to gain root access. If you're unable to gain root access, please contact Support by clicking the Chat button in the Ignite GUI
  3. Edit the rsyslog configuration file: vi /etc/rsyslog.conf, then type i
  4. To forward to one remote server: add the following lines to the bottom of the file, then press ESC and type :wq to write the changes and close the file:
    • # start forwarding rule
      $ActionQueueType LinkedList # use asynchronous processing
      $ActionQueueFileName srvrfwd # set file name, also enables disk mode
      $ActionResumeRetryCount -1 # infinite retries on insert failure
      $ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down
      *.* @@server:port
  5. Replace "server" with the name or IP of the server to which the logs are being forwarded
    • ":port" is optional and can be deleted, but if desired replace "port" with the port it is forwarding to
  6. To forward to multiple remote servers: add the following lines to the bottom of the file, then press ESC and type :wq to write the changes and close the file:
    • # start forwarding rule 1
      $ActionQueueType LinkedList # use asynchronous processing
      $ActionQueueFileName srvrfwd1 # set file name, also enables disk mode
      $ActionResumeRetryCount -1 # infinite retries on insert failure
      $ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down
      *.* @@server1:port
      # end forwarding rule 1

      # start forwarding rule 2
      $ActionQueueType LinkedList # use asynchronous processing
      $ActionQueueFileName srvrfwd2 # set file name, also enables disk mode
      $ActionResumeRetryCount -1 # infinite retries on insert failure
      $ActionQueueSaveOnShutdown on # save in-memory data if rsyslog shuts down
      *.* @@server2:port
      # end forwarding rule 2
  7. Replace "server1" and "server2" with the name or IP of the servers to which the logs are being forwarded
    • ":port" is optional and can be deleted, but if desired replace "port" with the port it is forwarding to
    • The $ActionQueueFileName must be unique in the rsyslog.conf file, which is why there's a different name in each forwarding rule
  8. Restart rsyslog: service rsyslog restart

 

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments