Syslog message

System Administrator Guide for Virtual Storage Platform E Series

Version

93-07-0x

Audience

anonymous

Part Number

MK-97HM85028-18

The following examples show Syslog messages that are sent from the storage system to the syslog server.

Note: The contents of a syslog message differ depending on whether the message is for alert notification or for audit log. The contents of a syslog message for alert notification are shown here. For details about the contents of a syslog message for audit log, see the Audit Log User Guide.

You can use the maintenance utility to select either of the following message formats: RFC3164-compliant or RFC5424-compliant.

For details, see Syslog settings

Syslog file format (RFC3164-compliant)

No.	Item	Description
1	Priority	The priority of a syslog message is determined according to the following formula, enclosed by angle brackets (< >): `Priority` = 8 × `Facility` + `Severity` `Facility` is 18 (fixed). `Severity` depends on the type of log information: 3: Error (abnormal end) 4: Warning (partially abnormal end, or an operation was canceled before it could be completed) 5: Notice (normal end) For example, if `Severity` is 3 (Error), <147> is output as the priority value.
2	Date, time¹	The date and time in the format of "`MMM` `DD` `HH`:`MM`:`SS`" `MMM`: first three letters of the month (Jan to Dec) `DD`: date If `DD` is a single digit (for example, 1), it is displayed as " 1" (with a blank space before "1") and not as "01". `HH`: hour `MM`: minute `SS`: second
3	Detected location	"GUM" (fixed)
4	Program name	"Storage" (fixed)
5	Message identification	The serial number (0000000000 to 4294967295)
6	Event type	Any of the following event category names. (The event category corresponds to `Severity`.) Acute `Severity` is 3 (Error). Serious `Severity` is 3 (Error). Moderate `Severity` is 4 (Warning). Service `Severity` is 5 (Notice).
7	Hardware identification²	The storage system name and serial number
8	Related information	The location identification information set in the Syslog tab in the maintenance utility
9	Detailed information	The SIM reference code and failure information that are displayed in the alert window
Notes: A date and time being set on SVP are output as log data. If a failure, such as a SVP failure and a LAN failure, occurs in the storage system, the date and time may be output of the accumulated date and time since January 01, 1970. While the controller model is being upgraded, information before upgrade might be output. While the controller model is being downgraded, information before downgrade might be output.

Syslog file format (RFC5424-compliant)

No.	Item	Description
1	Priority	The priority of a syslog message is determined according to the following formula, enclosed by angle brackets (< >): `Priority` = 8 × `Facility` + `Severity` `Facility` is 18 (fixed). `Severity` depends on the type of log information: 3: Error (abnormal end) 4: Warning (partially abnormal end, or an operation was canceled before it could be completed) 5: Notice (normal end) For example, if `Severity` is 3 (Error), <147> is output as the priority value.
2	Version	"1" (fixed)
3	Date, time¹	The date, time, and the time difference between UTC (Coordinated Universal Time) and the local time in the format of "`YYYY`-`MM`-`DD`T`hh`:`mm`:`ss`.`s`±`hh`:`mm`" `YYYY`: year, `MM`: month, `DD`: date `hh`: hour, `mm`: minute, `ss`.`s`: second in one decimal place ±`hh`:`mm`: hours and minutes of the time difference. "Z" is written instead of "± `hh`:`mm`" when there is no time difference between UTC and the local time, such as "2018-12-26T23:06:58.0Z".
4	Detected location	"GUM" (fixed)
5	Program name	"Storage" (fixed)
6	Process name	"-" (fixed.)
7	Message ID	"-" (fixed.)
8	Structured data	"-" (fixed.)
9	Message identification	The serial number (0000000000 to 4294967295)
10	Event type	Any of the following event category names. (The event category corresponds to `Severity`.) Acute `Severity` is 3 (Error). Serious `Severity` is 3 (Error). Moderate `Severity` is 4 (Warning). Service `Severity` is 5 (Notice).
11	Hardware identification²	The storage system name and serial number
12	Related information	The location identification information set in the Syslog tab in the maintenance utility
13	Detailed information	The SIM reference code and failure information that are displayed in the alert window
Notes: A date and time being set on SVP are output as log data. If a failure, such as a SVP failure and a LAN failure, occurs in the storage system, the date and time may be output of the accumulated date and time since January 01, 1970. While the controller model is being upgraded, information before upgrade might be output. While the controller model is being downgraded, information before downgrade might be output.