Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
gbasinski1
Participant
Jump to solution

Log Exporter on R80.30 Standby SMS

Hi,

 

I configured Log Exporter on Standby SMS (there are reasons for this) and started the process, however when running tcpdump on the SMS, I don't see any traffic going out to the Destination Syslog Server.

What I did was:

1) Configured log_exporter

cp_log_export add name <NAME> target-server <Target IP> target-port 514 protocol tcp format cef

2) started the process

cp_log_export restart name <NAME>

3) tcpdump on the interface

No syslog going out.

 

 

[Expert@hostname:0]# cp_log_export show

name: <NAME>
enabled: true
target-server: <IP>
target-port: 514
protocol: tcp
format: cef
read-mode: raw
export-link: false
export-attachment-link: false
export-attachment-ids: Found

[Expert@hostname:0]# ps aux | grep log_exporter
admin 7663 0.1 0.3 148476 54132 ? SNsl 10:13 0:01 /opt/CPrt-R80.30/log_exporter/targets/<NAME>/log_exporter -export /opt/CPrt-R80.30/log_exporter/targets/<NAME>/targetConfiguration.xml

 

Note: I replaced actual name of the SYSLOG TARGET with <NAME> and actual IP address with <IP> in the output above.

 

 

This is R80.30 SMS JHT 215

The logs are present when checking in Smart Console.

 

Now, I can't see any reference in CP manuals nor in sk122323 to SMS High Availability and how it behaves in this environment. It might be that Log Exporter works only when the SMS has the active role. I can't do a failover right now to test this theory as this is subject to change management process. Does anybody have any experience with Log Exporter on Standby SMS?

 

Any help is appreciated.

 

Thanks

G

0 Kudos
4 Replies
This widget could not be displayed.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events