Articles in this section

Sending Alarms to a Syslog Server

Sara Levy
  • Updated
Follow

You can configure VAST Cluster to send logs of events to a syslog service running on any remote Linux host. To do this, you need to enable the communication protocol on the syslog service and configure the VMS syslog settings.

Configuring VMS Syslog Settings

To configure the VMS to send events to syslog:

  • To configure syslog server settings using the VAST Web UI, see Default Action Settings

  • To configure syslog server settings using the VAST CLI, run eventdefinitionconfig modify. For example:

    eventdefinitionconfig modify --syslog-host 192.0.2.0 --syslog-port 514 --syslog-protocol udp --enable-actions

    Note

    In this example, the option --enable-actions enables all configured default actions including syslog. They are enabled by default, but can be disabled. To view the current configuration and status of all default alarm actions, run eventdefinitionconfig show or eventdefinitionconfig list.

Syslog Event Example

An example VAST Cluster event written to the syslog server:

2020-05-20T08:20:09.619086+00:00 v2cn1 vast_event AUDIT - VMS - Manager: admin, create monitor

Related articles

Comments

0 comments

Article is closed for comments.