Editing Syslog transfer settings of event logs

Virtual Storage Platform One SDS Block System Administrator Guide
Version
1.15.x
Audience
anonymous
Part Number
MK-24VSP1SDS001-02

Edit Syslog transfer of event logs as follows. You can set a maximum of two Syslog servers. For the structure of event logs transferred to the Syslog server, see Structure of event logs transferred to the Syslog server.

CAUTION:

When using a DNS server, a storage node caches DNS inquiry results for the time (DNS TTL) set in the DNS server. For this reason, if the content registered in the DNS server (correspondence between the host name and IP address) is changed, the storage node might access an old address during DNS TTL. Therefore, if you have changed the content registered in the DNS server (correspondence between the host name and IP address), wait until the time specified for DNS TTL has passed, and then set Syslog transfer.

Note:

When syslog transfer of event logs is set, VSP One SDS Block periodically sends ICMP echo requests to the set Syslog server to verify the network reachability.

  • Required role: Security

  1. Set Syslog transfer of event logs as follows.

    Run either of the following commands with the parameters for setting event log Syslog transfer specified.

    REST API: PATCH /v1/objects/event-log-setting

    CLI: event_log_setting_set

    Verify the job ID which is displayed after the command is run.

  2. Verify the state of the job by specifying the job ID.

    REST API: GET /v1/objects/jobs/<jobID>

    CLI: job_show

    If the job state is "Succeeded", the job is completed.

  3. (Virtual machine)(Bare metal) Back up the configuration information.

    Perform this step by referring to Backing up the configuration information (Virtual machine)(Bare metal).

    If you continue operations with other procedures, you must back up the configuration information after you have completed all operations.

  4. On the Syslog server, set whether event logs can be received from VSP One SDS Block.

    See the manual of the Syslog server in use, and make the following settings as required.

    • IP address of Syslog transmission source:

      (Virtual machine)(Bare metal)

      In Syslog transfer, the source IP address of the IP packets sent from VSP One SDS Block is as follows.

      • When a representative IP address of the storage cluster is not set:

        Control network IP address of the cluster master node (primary)

      • If the representative IP address of the storage cluster is specified:

        Representative IP address of the storage cluster or control network IP address of the cluster master node (primary)

      The cluster master node (primary) might be changed to another storage node due to storage node failure or other reasons. To ensure that Syslog messages can be received even in such cases, when registering a source IP address, set the representative IP address of the storage cluster and the IP addresses of all storage nodes for the control network.

      (Cloud)

      Syslog transfers from VSP One SDS Block do not pass through the load balancer, so the source IP address remains the IP address of each storage node for the control network. Therefore, when you register a source IP address, specify the IP address of each cluster master node for the control network, not the IP address assigned to the load balancer.

    • Port number of Syslog transmission source: Set the port number configured in step 1.

    • Communications protocol: Set the communication protocol configured in step 1.

  5. Verify that event logs are correctly transferred to the Syslog server as follows.

    Make the Syslog transfer setting of event logs again by using the same input values as step 1.

    If the Syslog transfer setting in VSP One SDS Block and the reception setting in the Syslog server are made properly, the following event log is transferred to the Syslog server, indicating that the job for setting event log Syslog transfer has been started. If the log is not transferred, review the setting and the network.

    • Event log name: Start of job

    • Event description: The job has started. JobId=[jobId],Operation=event_log_setting_set