Syslog server stopped receiving event logs after ONTAP upgrade/reboot
Applies to
ONTAP 9.2 and higher
Issue
- Syslog server stopped receiving events from the cluster after ONTAP upgrade/reboot;
- The syslog server is located in a different subnet;
- Two default routes are configured for the
adminSVM:
- One for the
intercluster networkusing10Gbit ifgroup - Another for the
mgmt networkusing1Gbit e0Mport
- Syslog traffic is expected to go through
e0Minterface; - But
10Gbit ifgroupinterface has more weight than1Gbit e0Mport causing syslog traffic to go via intercluster gateway which doesn't have connectivity to the systlog server.
