Node cannot forward logs to the external syslog server
Applies to
StorageGRID
Issue
- An Alert is seen within Grid Manager -
Logs are being added to the on-disk queue - Node cannot forward logs to the external syslog server and the on-disk queue is filling up.
- Syslog is setup correctly using documentation - Configure audit messages and external syslog server
- Communication/ping is possible between from the Grid to the Syslog server, but attempts to access the specified Syslog port results in:
A TCP or TLS connection to the syslog server was refused
- These messages can be seen in the /miscd/miscd.log or miscd.latest.log
syslMon - INFO -- Checking 'cannot connect to <syslog server>:<syslog port>: Connection refused
syslMon - INFO -- Detected 'p_connection_refused'
syslMon - INFO -- Setting forwarding error for remoteSyslogServerA
syslMon - INFO -- Updating connection state for remoteSyslogServerA
- The below messages can be seen with netcat or other attempts to access that port from nodes within the Grid:
-> nc -zv <syslog server> <syslog port>
nc: connect to <syslog server> (<syslog server ip>) port <syslog port> (tcp) failed: Connection refused