Smarts SAM/OI: How do you change the 'Source' field of a Smarts syslog notification from the default "Syslog Processor"?

Products

• VMware Smart Assurance

Environment

VMware Smart Assurance - SMARTS

Resolution

How do you change the Source field of a Smarts syslog notification from the default "Syslog Processor"?

To change the Source field of a Smarts syslog notification from the default "Syslog Processor", do the following:

1. Use sm_edit to open the syslog_mgr.asl file for editing as follows:
   
   <BASEDIR>/SAM/smarts/sm_edit rules/icoi-syslog/syslog_mgr.asl
   
    
2. Find the following entry in the syslog_mgr.asl file:
   
   ics_domain_name = "Syslog Processor";
   
    
3. Change Syslog Processor to the domain name that will be the source of syslog notifications.
4. Save and close the syslog_mgr.asl file.
5. Restart the syslog adapter process and the INCHARGE-OI domain manager. Note that only new syslog events that are received after this restart will reflect the new Source name. Syslog events that were received before the changes implemented by this restart will still have the old Source name.