Monitoring Syslog Server from DCNM-SAN
Cisco DCNM-SAN registers itself as a logging server and receives syslog messages and stores them in separate files for each switch.
With Cisco NX-OS Release 5.0(1a) and later, the DCNM-SAN stores the syslog messages from all the switches in a fabric to a database, and displays only the aggregated syslog information from the web client. This feature can be enabled or disabled. The syslog stored in the database is filtered by a configurable severity level.
Once the DCNM-SAN receives the syslog messages through the syslog receiver, the raw messages are parsed and the flag for persisting the message in the database is checked. The severity carried by this message is checked from the parsed fields, and the syslog messages are sent to the database.
The raw syslog messages are parsed into the following fields: switch time, facility, severity, event, and Vsan Id. The description is stored in the database and filtered by the severity level.
The following fields are added to server.properties:
- syslog.dblog.enable = false
This field is used to turn on the feature for storing the syslog messages into the database. By turning on this flag, the syslog messages are also written into the database.
- syslog.dblog.severity = warnings
This field is used to filter the syslog messages based on the severity. By configuring this property, syslog messages are filtered on the severity level.
Copyright 2010-2013, Cisco Systems, Inc. All rights reserved.