Which E-Series controller sends syslog event?
Applies to
- E-Series
- SANtricity OS
Answer
- If one controller fails or goes offline, syslog event is always sent by the controller that remains online.
- If both controllers are online, the sender depends on the log type:
- syslog for alerts: The controller that sends an alert event varies depending on the timing. For example, a drive failure alert can be sent by either Controller A or Controller B, with no preferred controller.
- syslog for audit logs: The controller that sends the syslog event is determined by the management IP address used to initiate the operation. For example,
- Audit logs generated by operations performed via Controller A's management IP (
10.128.227.51
as shown in the screenshot below) are sent from Controller A to the syslog server. - Audit logs generated by operations performed via Controller B's management IP (
10.128.227.52
as shown in the screenshot below) are sent from Controller B to the syslog server.
- Audit logs generated by operations performed via Controller A's management IP (