StorageGRID reports External syslog server forwarding error due to bad certificate
Applies to
- NetApp StorageGRID
- External syslog server using TLS certificates
Issue
- StorageGRID UI reports
External syslog server forwarding erroron all nodes. - Additional alerts persists as a symptom of the audit logs not forwarding:
Logs being added to the on-disk memory queueAudit logs being added to the in-memory queue
- Admin node(s) may also report
Unable to communicate with nodewith chunk service unresponsive.

/var/local/log/miscd.logintermittently records failed connections for Bad Certificate.
[2025-12-23T18:21:54.185] syslMonCertExp-remoteSyslogServerA - ERROR -- Failed to fetch server certificate from <external_syslog:Port> due to error: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:992)
[2025-12-23T18:21:54.186] syslMonCertExp-remoteSyslogServerA - ERROR -- Couldn't parse cert from <external_syslog:Port>: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:992)
/var/local/log/miscd.logintermittently records successful connections with No Errors Detected.
[2025-12-23T21:02:40.650] syslMon - INFO -- Updating connection state for remoteSyslogServerA[2025-12-23T21:02:40.650] syslMon - INFO -- No error detected[2025-12-23T21:02:40.651] syslMon - INFO -- Detected that forwarding is now working for remoteSyslogServerA
- Sending Test messages from all nodes pass successfully.
