Syslog server stopped receiving event logs after ONTAP upgrade/reboot
Applies to
ONTAP 9.2 and higher
Issue
- Syslog server stopped receiving events from the cluster after ONTAP upgrade/reboot;
- The syslog server is located in a different subnet;
- Two default routes are configured for the
admin
SVM
:
- One for the
intercluster network
using10Gbit ifgroup
- Another for the
mgmt network
using1Gbit e0M
port
- Syslog traffic is expected to go through
e0M
interface; - But
10Gbit ifgroup
interface has more weight than1Gbit e0M
port causing syslog traffic to go via intercluster gateway which doesn't have connectivity to the systlog server.