NETAPP CLUSTER MODE SYSLOG CONFIGURATION:

DESCRIPTION

This article describes the procedure to be followed to forward syslog messages to a

remote syslog loghost in clustered Data ONTAP.
PROCEDURE

In Data ONTAP 7-Mode, what goes to the remote syslog host is controlled by
the /etc/syslog.conf file:
*.err;kern.*@remotehost

In clustered Data ONTAP, the /etc/syslog.conf file has been deprecated.

Thus, what goes to the remote syslog host is controlled by the settings. This is done
by running the eventdestinationcommands.
For example display information about all event destinations:
cluster1::>eventdestinationshow

Modify an existing syslog host:

cluster1::>eventdestinationmodifyname<Name_of_sysSvr>
syslog<Remote_IP>

Add a syslog host:

cluster1::>eventdestinationcreatename<Name_of_sysSvr>
syslog<Remote_IP>

These messages are sent to the syslogd daemon on the remote host.
cmode::>eventdestinationcreatenamesyslogsyslog<syslog
serverIP>
cmode::>eventrouteadddestinations{severity
EMERGENCY,ALERT,CRITICAL,ERROR,WARNING,NOTICE,INFORMATIONAL
messagenamecmdsaudit.auditlog}destinationssyslog
#togetallcriticaleventsandlower...
cmode::>eventrouteadddestinations{severity<=CRITICAL}
destinationssyslog

eventrouteadddestinations{severity
EMERGENCY,ALERT,CRITICAL,ERROR,WARNING,NOTICE,INFORMATIONAL
messagenamecmds.*}destinationssyslog
77entrieswereactedon.