• Logging

    PDF

    Logging

    This chapter describes a variety of logging features implemented on the storage system.

    Topics include:

    Logging

    The storage system maintains the following types of logs for tracking events that occur on the system. See Table 1.

    Table 1. Logs
    Log type
    Description
    System log
    Information displayed in Unisphere to notify users about storage system user-actionable events. These records are localized according to the default language setting specified for the system.
    User-actionable events include audit events. However, not all logged events show up in the GUI. Those audit log entries that do not meet a certain severity threshold are logged by the system but do not appear in the GUI.
    System alert
    Information used by the Service personnel to diagnose or monitor the storage system status or behavior. These records are recorded in English only.
    Viewing and managing logs

    The following logging features are available for storage systems. See Table 2.

    Table 2. Logging features
    Feature
    Description
    Log roll-over
    When the storage system log system accumulates two million log entries, it purges the oldest 500K entries (as determined by log record time) to return to 1.5 million log entries. You can archive log entries by enabling remote logging so that log entries are uploaded to a remote network node where they can be archived or backed up. The Logging section provides more information.
    Logging levels
    Logging levels are not configurable for the storage system. Log levels can only be configured for exported log files as described in the Logging section.
    Alert integration
    You can view storage system alert information in the following ways:
    • View alerts only:
      • In Unisphere, go to Events > Alerts.
    • View log events:
      • Using the Unisphere CLI, type the command uemcli /event/alert/hist show.
      • In Unisphere, go to System > Service > Logs.
    External log management
    You can archive log entries by enabling remote logging so that log entries are uploaded to a remote network node where they can be archived or backed up. There, you can use tools such as syslog to filter and analyze log results. The Logging section provides more information.
    Time synchronization
    Log time is recorded in GMT format and is maintained according to the storage system time (which may be synchronized to the local network time through an NTP server).

    Remote logging options

    The storage system supports logging user/audit messages to a remote host. By default, the storage system transfers log information on port 514 using UDP. The following remote logging settings are configurable through Unisphere. Log into Unisphere and click Settings > Management > Remote Logging.

    • Enable logging to a remote host.
    • Network name or IP address where the storage system sends remote log information.
    • Type of log messages to send. Use the Facility field to set the type of log messages. It is recommended that you select the User-Level Messages options.
    • Port number and type (UDP or TCP) to use for log transmission.
    Configuring a host to receive storage system log messages

    Before configuring remote logging for a storage system, you must configure a remote system running syslog to receive logging messages from the storage system. In many scenarios, a root/administrator on the receiving computer can configure the remote syslog server to receive log information by editing the syslog-ng.conf file on the remote system.

    For more information on setting up and running a remote syslog server, refer to the documentation for the operating system running on the remote system.