Syslog message

Alert Notification Guide for VSP 5000 Series

Version: 90-08-8x
Audience: anonymous
Part Number: MK-98RD9011-13

The following examples show Syslog messages that are sent from the storage system to the syslog server.

You can use Hitachi Device Manager - Storage Navigator to select either of the following message formats: RFC3164-compliant or RFC5424-compliant.

For details, see Editing Syslog settings

Syslog file format (RFC3164-compliant)

No.	Item	Description
1	Priority	The priority of a syslog message is determined according to the following formula, enclosed by angle brackets (< >): `Priority` = 8 × `Facility` + `Severity` `Facility` is 18 (fixed). `Severity` depends on the type of log information: 3: Error (abnormal end) 4: Warning (partially abnormal end, or an operation was canceled before it could be completed) 5: Notice (normal end) For example, if `Severity` is 3 (Error), <147> is output as the priority value.
2	Date, time¹	The date and time in the format of "`MMM` `DD` `HH`:`MM`:`SS`" `MMM`: first three letters of the month (Jan to Dec) `DD`: date If `DD` is a single digit (for example, 1), it is displayed as " 1" (with a blank space before "1") and not as "01". `HH`: hour `MM`: minute `SS`: second
3	Detected location	"SVP" (fixed)
4	Program name	"Storage" (fixed)
5	Message identification	The serial number (0000000000 to 4294967295)
6	Event type	Any of the following event category names. (The event category corresponds to `Severity`.) Acute `Severity` is 3 (Error). Serious `Severity` is 3 (Error). Moderate `Severity` is 4 (Warning). Service `Severity` is 5 (Notice).
7	Hardware identification²	The storage system name and serial number
8	Related information	The location identification information set in the Syslog tab in the Edit Alert Settings window of Device Manager - Storage Navigator
9	Detailed information	The SIM reference code and failure information that are displayed in the alert window
Notes: A date and time being set on SVP are output as log data. If a failure, such as a SVP failure and a LAN failure, occurs in the storage system, the date and time may be output of the accumulated date and time since January 01, 1970. While the controller model is being upgraded, information before upgrade might be output. While the controller model is being downgraded, information before downgrade might be output.

Syslog file format (RFC5424-compliant)

No.	Item	Description
1	Priority	The priority of a syslog message is determined according to the following formula, enclosed by angle brackets (< >): `Priority` = 8 × `Facility` + `Severity` `Facility` is 18 (fixed). `Severity` depends on the type of log information: 3: Error (abnormal end) 4: Warning (partially abnormal end, or an operation was canceled before it could be completed) 5: Notice (normal end) For example, if `Severity` is 3 (Error), <147> is output as the priority value.
2	Version	"1" (fixed)
3	Date, time¹	The date, time, and the time difference between UTC (Coordinated Universal Time) and the local time in the format of "`YYYY`-`MM`-`DD`T`hh`:`mm`:`ss`.`s`±`hh`:`mm`" `YYYY`: year, `MM`: month, `DD`: date `hh`: hour, `mm`: minute, `ss`.`s`: second in one decimal place ±`hh`:`mm`: hours and minutes of the time difference. "Z" is written instead of "± `hh`:`mm`" when there is no time difference between UTC and the local time, such as "2018-12-26T23:06:58.0Z".
4	Detected location	"SVP" (fixed)
5	Program name	"Storage" (fixed)
6	Process name	"-" (fixed.)
7	Message ID	"-" (fixed.)
8	Structured data	"-" (fixed.)
9	Message identification	The serial number (0000000000 to 4294967295)
10	Event type	Any of the following event category names. (The event category corresponds to `Severity`.) Acute `Severity` is 3 (Error). Serious `Severity` is 3 (Error). Moderate `Severity` is 4 (Warning). Service `Severity` is 5 (Notice).
11	Hardware identification²	The storage system name and serial number
12	Related information	The location identification information set in the Syslog tab in the Edit Alert Settings window of Device Manager - Storage Navigator
13	Detailed information	The SIM reference code and failure information that are displayed in the alert window
Notes: A date and time being set on SVP are output as log data. If a failure, such as a SVP failure and a LAN failure, occurs in the storage system, the date and time may be output of the accumulated date and time since January 01, 1970. While the controller model is being upgraded, information before upgrade might be output. While the controller model is being downgraded, information before downgrade might be output.