Skip to main content
NetApp Knowledge Base

StorageGRID Node cannot forward logs to the external syslog server

  1. Last updated
  2. Save as PDF
Views:
923
Visibility:
Public
Votes:
0
Category:
storagegrid
Specialty:
sgrid
Last Updated:

Applies to

  • NetApp StorageGRID 11.6,11.7
  • External Syslog Server
  • Failover Syslog Server

Issue

  • StorageGRID Grid Manager reports the following alert:
    • Name: External syslog server forwarding error 
    • Description: Node cannot forward logs to the external syslog server
    • Check the /var/local/log/miscd.log
    • [2022-03-22T09:25:25.092]     syslMon -    INFO -- Updating connection state for remoteSyslogServerA
[2022-03-22T09:25:25.092]     syslMon -    INFO -- Checking 'omfwd: remote server at sysmlog.net:60119 seems to have closed connection. 
This often happens when the remote peer (or an interim system like a load balancer or firewall) shuts down or aborts a connection. 
Rsyslog will re-open the connection if configured to do so (we saw a generic IO Error, which usually goes along with that behaviour). 
[v8.2108.0 try https://www.rsyslog.com/e/2027 ]' for errors
[2022-03-22T09:25:25.092]     syslMon -    INFO -- Detected 'p_connection_closed_by_partner'
[2022-03-22T09:25:25.092]     syslMon -    INFO -- Setting forwarding error for remoteSyslogServerA
[2022-03-22T09:25:25.111]     syslMon -    INFO -- Updating connection state for remoteSyslogServerA
  • Automatic failover to a second external syslog server configured
  • Time to switch to the failover syslog server took longer then 15 minutes, hence the alert was triggered

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.