Skip to main content
NetApp Knowledge Base

Which E-Series controller sends syslog event?

Views:
47
Visibility:
Public
Votes:
0
Category:
e-series-santricity-management-software
Specialty:
esg
Last Updated:

Applies to

  • E-Series
  • SANtricity OS

Answer

  • If one controller fails or goes offline, syslog event is always sent by the controller that remains online.
  • If both controllers are online, the sender depends on the log type:
    • syslog for alerts: The controller that sends an alert event varies depending on the timing. For example, a drive failure alert can be sent by either Controller A or Controller B, with no preferred controller.
    • syslog for audit logs: The controller that sends the syslog event is determined by the management IP address used to initiate the operation. For example,
      • Audit logs generated by operations performed via Controller A's management IP (10.128.227.51 as shown in the screenshot below) are sent from Controller A to the syslog server.
      • Audit logs generated by operations performed via Controller B's management IP (10.128.227.52 as shown in the screenshot below) are sent from Controller  B to the syslog server.

clipboard_e85b711d83fe641ed4f74881078e7c54e.png

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.