Viewing syslog notification settings

Use the Viewing Syslog Notification Settings panel in the SAN Volume Controller Console to view and specify syslog servers to receive syslog messages from a SAN Volume Controller cluster.

Introduction

The syslog protocol is a client-server standard for forwarding log messages from a sender to a receiver on an IP network. The IP network can be either IPv4 or IPv6. The User Datagram Protocol (UDP) is used to transmit the syslog message. The syslog protocol can be used across multiple platforms, which enables you to integrate log data from different types of storage systems into a central repository. You can use the SAN Volume Controller Console to configure and modify your syslog settings. SAN Volume Controller can transmit syslog messages in fully expanded or concise format.

The following table describes the SAN Volume Controller notification type and its corresponding syslog level.

Table 1. SAN Volume Controller notification type and corresponding syslog level
SAN Volume Controller notification type Syslog level Description
Error LOG_ALERT Indicates a serious problem on the cluster that needs to be fixed immediately.
Warning LOG_ERROR Indicates a problem or unexpected condition with the cluster that needs to be investigated to determine any corrective action.
Informational LOG_INFO Indicates an expected event has occurred and does not require any corrective action.

The SAN Volume Controller facility value is mapped to a corresponding syslog facility code and value. The facility of a syslog message indicates its origin and can be used to differentiate messages by source. For example, the facility value differentiates messages sent from two clusters or messages sent from a cluster and other products that uses syslog to send messages.

The SAN Volume Controller facility of 0 - 3 results in the syslog server receiving messages in concise format, which provide standard detail on the event. A SAN Volume Controller facility of 4 - 7 results in the syslog server receiving messages in fully expanded format, where more details are provided regarding the event.

Syslog concise message format includes the following data:
  • Record type
  • Error identifier
  • Error code
  • Cluster name
  • Error sequence number
  • Time stamp
  • Object type
  • Object identifier
  • Copy identifier
Syslog full messages format includes the following data:
  • Record type
  • Machine type
  • Serial number
  • Error identifier
  • Error code
  • Software version
  • Field-replaceable unit (FRU)
  • Cluster name
  • Node identifier
  • Error sequence number
  • Timestamp
  • Object type
  • Object identifier
  • Copy identifier
  • Additional data 0 to 63
  • Additional data 64 to 127
The following table describes the SAN Volume Controller facility and its corresponding syslog code and value.
Table 2. SAN Volume Controller facility values and the corresponding syslog facility code and value
SAN Volume Controller facility values Syslog facility code Syslog value
0 LOG_LOCAL0 16
1 LOG_LOCAL1 17
2 LOG_LOCAL2 18
3 LOG_LOCAL3 19
4 LOG_LOCAL4 20
5 LOG_LOCAL5 21
6 LOG_LOCAL6 22
7 LOG_LOCAL7 23

Attributes

The following attributes are displayed:
Select
Select the server to use to perform an action from the task list.
Server Name
Displays the name for the syslog server. A valid name is 1 to 15 ASCII characters. The following characters can be used: a - z, A - Z, 0 - 9, -, _. The name cannot begin with a number or the hyphen (-) character. Names starting with syslog are reserved for SAN Volume Controller default names.
IP Address
Displays the IP address of the syslog server. Both IPv4 and IPv6 address structures are supported.
SVC Facility
Displays the SAN Volume Controller facility for the syslog server. The SAN Volume Controller facility values displayed on the panel are translated into syslog facility codes and values.

The SAN Volume Controller facility of 0 - 3 results in the syslog server receiving messages in concise format, which provide standard detail on the event. A SAN Volume Controller facility of 4 - 7 results in the syslog server receiving messages in fully expanded format, where more details are provided regarding the event.

Send Error Notifications
Displays whether the SAN Volume Controller cluster sends events with the notification type of error to the syslog server. When an event notification with the type error is received by the SNMP server, the problem must be fixed immediately. This notification indicates a serious problem with the SAN Volume Controller cluster. For example, the event that is being reported could indicate a loss of redundancy in the system, and it is possible that another failure could result in loss of access to data. A hardware failure is the most typical reason this type of notification is sent, but some configuration errors or fabric errors also are included in this notification type.
On
Indicates that events with the notification type of error are sent to the specified syslog server.
Off
Indicates that events with the notification type of error are not sent to the specified syslog server.
Send Warning Notifications
Displays whether the SAN Volume Controller cluster sends events with the notification type of warning to the syslog server. A warning notification is sent to indicate a problem or unexpected condition with the SAN Volume Controller. Always immediately investigate this type of notification to determine the effect that it might have on your operation and correct the problem if necessary. A warning notification does not require any replacement parts and therefore should not require IBM® Support Center involvement. However, the event being reported might indicate a condition that could be fatal to your operating environment; such as, a critical FlashCopy® operation has failed.
On
Indicates that events with the notification type of warning are sent to the specified syslog server.
Off
Indicates that events with the notification type of warning are not sent to the specified syslog server.
Send Informational Notifications
Displays whether the SAN Volume Controller cluster sends events with the notification type of informational to the syslog server. For these types of notifications, no action is necessary to resolve them. This notification indicates an event that was expected has occurred. For example, a FlashCopy mapping event has completed successfully. No remedial action is required when these notification types are sent.
On
Indicates that events with the notification type of informational are sent to the specified syslog server.
Off
Indicates that events with the notification type of informational are not sent to the specified syslog server.

Actions

You can select one of the following tasks from the task list:
  • Add a Server
  • Modify Server
  • Delete Server
Go
Click this button after selecting a task from the task list. Clicking Go launches the panel for the task that you selected.
Library | Support | Terms of use | Feedback
© Copyright IBM Corporation 2003, 2009. All Rights Reserved.