Syslog messages clear from Global Console upon restart of Smarts Syslog Adapter

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:




Syslog adapter is running but no syslog events appear in Smarts OI or SAM Consoles
Syslog messages clear from Global Console upon restart of Smarts Syslog Adapter

Environment

VMware Smart Assurance - SMARTS

Cause

The syslog adapter configuration file ships by default with a setting to discard all incoming syslog messages when the adapter is started.

Resolution

Change the default value in the my_hook_syslog.asl under the MODIFY_ATTRIBUTES section near the end of the file for DISCARD = "TRUE"; to DISCARD = "FALSE";

The my_hook_syslog.asl file has a DISCARD parameter at the top of the file.  Do not change the parameter here as it will have no effect.  You must make the change to the file at approximately line 219 where is begins with:
MODIFY_ATTRIBUTES {
} do {
    DISCARD = "TRUE";             <--- Modify here
    CLEAR_SYSLOG = "FALSE";
    BATCH_NOTIFY_INTERVAL = 10;
    CLASSNAME = "Syslog" ? LOG;