Structure of event logs transferred to the Syslog server

Virtual Storage Platform One SDS Block System Administrator Guide

Version

1.16.x

Audience

anonymous

Part Number

MK-24VSP1SDS001-03

Each piece of event log information transferred to the Syslog server is structured as follows. No line feed code is inserted.

Header part

The following is an example of the header part. Each triangle (△) in the example indicates a space. Each number in the example corresponds to the equivalent in the following table.

Number	Item	Description
1	Priority	<130>: When the severity of the event is "Critical" <131>: When the severity of the event is "Error" <132>: When the severity of the event is "Warning" <134>: When the severity of the event is "Info"
2	Version	Fixed to "1".
3	Date and time	The output format is "YYYY-MM-DDThh:mm:ss.s±hh:mm" (YYYY: Year, MM: Month, DD: Date, hh: Hour, mm: Minute, ss.s: Second). The date and time are in coordinated universal time (UTC). "±hh:mm" indicates the time difference between the UTC and the time when the event occurred. "+" means that the time when the event occurred is hh:mm faster than the UTC. "-" means that the time when the event occurred is hh:mm slower than the UTC. "Z" attached to the date and time as in 2019-03-20T23:06:58.0Z means that the date and time is the same as the UTC.
4	Storage cluster name	Storage cluster name.
5	Program name	Fixed to "Storage".
6	Process name	Fixed to "-".
7	Message name	Fixed to "-".

Structured data part

The following is an example of the structured data part. Each triangle (△) in the example indicates a space. Each number in the example corresponds to the equivalent in the following table.

Number	Item	Description
8	Structured data	Fixed to "-".

Message part

The following is an example of the message part. Each triangle (△) in the example indicates a space. Each number in the example corresponds to the equivalent in the following table.

Note:

"%xEF.BB.BF" is added as the byte order mark (BOM) to the beginning of the message part.

Number	Item	Description
9	Message serial number	Serial number assigned to each event (Range: 0000000001 to 9999999999).
10	Event ID	Event ID.
11	Event category	Indicates an event category (such as drive and storage pool).
12	Unique event name	Event name uniquely given.
13	Message ID	Message ID.
14	Severity of the event	Severity of the event. Info: Notified for your information. Warning: Warning level. Immediate action is not required, but this event might cause a major failure in the future. Error: Error level. Corrective action is required. Critical: Fatal failure. Immediate action is required.
15	Event description	Event description.
16	Information about a storage node on which the event occurred	Information about a storage node on which the event occurred.
17	Event type	Type of the event. This item is reserved for future use. "Informational" is always output.
18	Location name	Location of the event output source, such as the installation location of equipment.
19	Model name : Serial number	Model name and serial number.