Title: Alarm for logging.missing_remote_logging_server
Event ID: logging.missing_remote_logging_server
Added in release: 4.1.2
Alarm Description
- Purpose: Indicates whether a remote logging server is configured.
- Impact: There is limited disk space on nodes to store log messages. Log rotation is used to limit the amount of space each log file consumes. If a remote logging server is not configured, then the rotated log messages are lost which makes it difficult to triage issues.
Resolution:1. Invoke API
GET /api/v1/configs/central-config/logging-servers to see the nodes on which remote logging is not configured.
2. For NSX Manager, Global Manager and Edge nodes, use NSX CLI
set logging-server <hostname-or-ip-address[:port]> proto <proto> level <level> to configure a remote logging server and use NSX CLI
get logging-servers to confirm if a remote logging server has been configured.
Note. Please choose the logging level based on the user requirements to avoid full the remote logging server's disk space. Valid logging level operation includes: emerg, alert, crit, err, warning, notice, info, debug.
3. For ESXi nodes, use ESXi CLI
esxcli system syslog config set --loghost=<str> and then
esxcli system syslog reload to configure a remote logging server and use ESXi CLI
esxcli system syslog config get and check Remote Host in response to confirm if the remote logging server has been configured.
4. If your setup only contains NSX Manager and Edge nodes, we recommend you use Node Profile to configure the remote logging server. Go to System | Fabric | Profiles | Node Profiles | All NSX Nodes and configure the remote logging server in the Syslog Servers section. The configuration will be applied on all NSX Manager and Edge nodes.