Skip to main content
NetApp Knowledge Base

CAIQUM-8892: Active IQ Unified Manager 9.18+ keeps adding exclude rules to the Syslog Filter

Views:
Visibility:
Public
Votes:
0
Category:
active-iq-unified-manager
Specialty:
om
Last Updated:

Issue

Starting with Active IQ Unified Manager 9.18, AIQUM will use event filters for manually subscribed EMS events rather than leveraging event route show and event destination show.
Automatically subscribed events will have a filter with the name
[umhostname]_filter
Manually subscribed events will have a filter with the name
[umhostname]_filterSyslog
The syslog filter will periodically have extra exclude rules to the filter until it hits the Ontap rule limit.

umserver_filterSysLog
            2    include  wafl.snap.create.skip.reason
                                           EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
                                                         Standard, Built-in, Severity-based
                                                                   *=*
            3    include  wafl.vol.outOfInodes
                                           EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
                                                         Standard, Built-in, Severity-based
                                                                   *=*
            4    include  wafl.dir.size.max.warning
                                           EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
                                                         Standard, Built-in, Severity-based
                                                                   *=*
            5    include  vol.language.changed
                                           EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
                                                         Standard, Built-in, Severity-based
                                                                   *=*
            6    include  callhome.clus.net.degraded
                                           EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
                                                         Standard, Built-in, Severity-based
                                                                   *=*
            7    include  wafl.vvol.offline
                                           EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL, DEBUG
                                                         Standard, Built-in, Severity-based
                                                                   *=*
            8    exclude  *                *             *         *=*
            9    exclude  *                *             *         *=*
            10   exclude  *                *             *         *=*
            11   exclude  *                *             *         *=*
            12   exclude  *                *             *         *=*
            13   exclude  *                *             *         *=*
            14   exclude  *                *             *         *=*

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.