In NSX-v, the 4th syslog server is not working as expected
search cancel

In NSX-v, the 4th syslog server is not working as expected

book

Article ID: 325424

calendar_today

Updated On:

Products

VMware NSX

Issue/Introduction

  • When configuring syslog server number four in the NSX-v Manager, the syslog server is not receiving the NSX Manager logs
  • If we look at the NSX Manager syslog config file, we can see that the rfc5424 configuration for syslog number four are not being passed.

    # less /etc/syslog-ng.conf

    #Destinations
    destination dst_local { file("/var/log/messages"); };
    destination dst_console { file("/dev/tty12"); };
    destination dst_remote1 { udp("<IP1>" port(514)); };
    destination dst_remote1_rfc5424 { udp("<IP1>" port(514) template("<$PRI>$MSGHDR$MSG")); };
    destination dst_remote2 { udp("<IP2>" port(514)); };
    destination dst_remote2_rfc5424 { udp("<IP2>" port(514) template("<$PRI>$MSGHDR$MSG")); };
    destination dst_remote3 { udp("<IP3>" port(514)); };
    destination dst_remote3_rfc5424 { udp("<IP3>" port(514) template("<$PRI>$MSGHDR$MSG")); };
    destination dst_remote4 { udp("<IP1>" port(514)); };
    destination dst_remote4_rfc5424 { };      << configuration is missing here for syslog number 4



Cause

This issue occurs due to incorrect handling of the 4th server information when generating the syslog configuration file.

Resolution

This issue is resolved in NSX 6.4.6.