由于网络路由、事件未发送到系统日志服务器

最后更新
另存为PDF

Views:: 3

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: core<a>2009年116439</a>

Last Updated:

适用场景

ONTAP 9
系统日志
事件转发

问题描述

将事件转发配置为系统日志服务器后、事件不会发送到系统日志服务器。

cluster::> event filter show -filter-name syslog-NetApp FFilter Name Rule Rule Message Name SNMP Trap Type Severity Position Type ----------- -------- --------- ---------------------- --------------- -------- syslog-NetApp 1 include callhome.* * ERROR 2 include * * EMERGENCY, ALERT, ERROR, NOTICE, INFORMATIONAL 3 exclude * * * 3 entries were displayed.

cluster::> event notification destination show Name Type Destination -------------- ---------- --------------------- syslog-NetApp syslog 1.2.3.4

cluster::> event notification show ID Filter Name Destinations ---- ------------------------------ ----------------- ... 4 syslog-NetApp syslog-NetApp 4 entries were displayed.

系统日志服务器看不到来自任何管理LIF的任何通信。
数据包跟踪不会显示与系统日志服务器的任何通信。

可以使用mgmt LIF (node和cluster mgmt)按IP和主机名对系统日志服务器执行ping操作：

Cluster::*> net int show -role *mgmt*

(network interface show) Logical Status Network Current Current Is Vserver Interface Admin/Oper Address/Mask Node Port Home ----------- ---------- ---------- ------------------ ------------- ------- ---- Cluster node1_mgmt1 up/up x.x.x.x/24 node1 e0M true node2_mgmt1 up/up x.x.x.x/24 node2 e0M true cluster_mgmt_lif_1 up/up x.x.x.x/24 node1 e0M true

示例

cluster::> network ping -vserver Cluster -lif node2_mgmt1 -destination 1.2.3.4 (network ping) 1.2.3.4 is alive

Cluster::> network ping -lif node2_mgmt1 -destination syslog.mycompany.com -vserver Cluster (network ping) syslog.mycompany.com is alive

cluster::> net traceroute -vserver Cluster -lif node2_mgmt1 -destination 1.2.3.4 (network traceroute) traceroute to 1.2.3.4 (1.2.3.4) from 10.130.252.31, 64 hops max, 40 byte packets 1 1.2.3.4 (1.2.3.4) 0.194 ms 0.144 ms 0.113 ms

测试事件将发送到系统日志目标。

cluster::> event generate -message-name monitor.volume.nearlyFull -values TEST,TEST,TEST,TEST,TEST,TEST

Cluster::*> event notification history show -destination syslog-NetApp Time Node Severity Event ------------------- ---------------- ------------- --------------------------- 5/6/2022 13:48:42 node1 ERROR monitor.volume.nearlyFull: TEST TESTTESTTEST is nearly full (using or reserving TEST% of space and TEST% of inodes).

管理SVM有一个默认路由

Cluster::*> network route show -vserver Cluster cluster::> network route show -vserver Cluster Vserver Destination Gateway Metric ------------------- --------------- --------------- ------ Cluster 0.0.0.0/0 x.x.252.1 20