User guide

Setting Up Fault Management Configuring System Logs (NMS System Log Server)
936
AlliedView NMS Administration Guide
If any changes are made and the window is closed without clicking Apply, a prompt will appear asking whether to make the
changes.
9.5.5 Setting Up Event Filters for SYSLOG Events
Section 9.6 describes how to configure system logs. To configure the event filter for system logs, you set the Category field
(shown in Figure 9-16) with the string “SYSLOG-” and the Event Type. For all event types that have been configured, the
string “SYSLOG-*” would be entered. You would then continue to configure the type of action.
9.6 Configuring System Logs (NMS System Log Server)
Logs are indications of various changes that occur in the managed devices on a network. To assist in troubleshooting
network problems and in monitoring the overall health of the network, it is important to monitor certain logs as they are
received from the network devices. Proper management of these system logs (also called SysLogs), is controlled by the NMS
System Log Server feature, and the feature helps in monitoring and troubleshooting your network.
Up until NMS release 11.0 SP5, this feature worked as follows:
• All SysLog messages were stored in the NMS database if enabled.
• Only events that were reported by discovered devices were processed by the NMS and stored.
In NMS release 11.0 SP5, the following changes are made:
• Incoming events from non-discovered devices can also be received. Since the administrator may not want syslog
information to be stored on the NMS database, there is also the option for SysLogs to be stored in a local file.
• The Status Monitoring GUI has a System Log tab added to the “Application Logs” option, allowing the local file to be
viewed, as well as the option to export the local file to the client’s browser or NMS server. Refer to 3.9.
The relationship between the components that provide system logs is as follows:
• The log types that are displayed in the System Log Events tree node (Under Network Events) are those being stored in
the database, and are controlled through configuring the system log server, described in 9.6.1.
• The filtering of logs produced by the device that are sent to the NMS is controlled by applying log filters. This is described
in 9.6.2.
• Controlling what actions to take upon the reception of system logs is controlled through the Event Filter, described in
9.5. Details on filtering for system logs are given in 9.5.5.
Note: On Solaris, upon server startup if there is a default unix syslogd running; then it will be shutdown so the port 514 is used by
the NMS to run its own Syslog Process.