Syslog messages clear from Global Console upon restart of Smarts Syslog Adapter
search cancel

Syslog messages clear from Global Console upon restart of Smarts Syslog Adapter

book

Article ID: 303913

calendar_today

Updated On: 11-27-2024

Products

VMware Smart Assurance

Issue/Introduction

  • Syslog adapter is running but no syslog events appear in Smarts OI or SAM Consoles
  • Syslog messages clear from Global Console upon restart of Smarts Syslog Adapter

Environment

VMware Smart Assurance - SMARTS

Cause

The syslog adapter configuration file ships by default with a setting to discard all incoming syslog messages when the adapter is started.

Resolution

  • Change the default value in the my_hook_syslog.asl under the MODIFY_ATTRIBUTES section near the end of the file for DISCARD = "TRUE"; to DISCARD = "FALSE";
  • The my_hook_syslog.asl file has a DISCARD parameter at the top of the file.  Do not change the parameter here as it will have no effect.  You must make the change to the file at approximately line 219 where is begins with:

MODIFY_ATTRIBUTES {
} do {
    DISCARD = "TRUE";             <--- Modify here
    CLEAR_SYSLOG = "FALSE";
    BATCH_NOTIFY_INTERVAL = 10;
    CLASSNAME = "Syslog" ? LOG;