Troubleshooting - Edge not sending logs to syslog server
search cancel

Troubleshooting - Edge not sending logs to syslog server

book

Article ID: 371504

calendar_today

Updated On:

Products

VMware VeloCloud SD-WAN Edge Appliance

Issue/Introduction

Issue: Edges does not send logs to syslog server

 

Steps to troubleshoot to confirm edge is sending logs to syslog

 

  1. Check if the RSYSLOG process is running from diag bundle pstree-aln.out.txt output. 
  2. Check reachability to syslog server IP from remote diagnostic page using source interface configured for syslog server reachability.
  3. Take packet capture on the outgoing interface to see if the syslog packet is sent out of our box
  4. Verify segment NAT dump to see Tx packet are incrementing from diag bundle. We do not expect Rx to increment.
  5. Set the syslog event to debug and add one more syslog server IP or make any changes . This should trigger a log to syslog. 
  6. We could check using PCAP if the logs are sent.

Environment

ALL VMware Velocloud SD-WAN edge versions

Resolution

If issue was root cause after all the steps. Please engage technical support to troubleshoot further.