Not Seeing some syslog events under SystemEDGE Syslog model

Products

• Spectrum
• Network Observability

Issue/Introduction

We configured Spectrum to accept syslog via rsyslog and are not seeing some events under the SystemEDGE Syslog model

Environment

DX Netops Spectrum

Cause

The default rules in the provided Spectrum_RSyslog.conf are examples and are configured conservatively to not flood Spectrum.

Resolution

Depending on the syslog messages you need to pass, the rules in the Spectrum_RSyslog.con likely need additional customization.

The syslog messages must match a regex specified in the  Spectrum_Rsyslog.conf file.

 

 

Additional Information

SMALL BYTES: How to Utilize Syslogs for Improved NetOps Visibility

Also see the following for more on configuring rsyslog and rsyslog rules. 

https://www.rsyslog.com

https://www.rsyslog.com/doc/configuration/modules/omsnmp.html