• Logging



    This chapter describes a variety of logging features implemented on the storage system.

    Topics include:


    The storage system maintains the types of logs that are listed in the following table for tracking events that occur on the system.

    Table 1. Logs
    Log type
    System log
    Information displayed in Unisphere to notify users about storage system user-actionable events. These records are localized according to the default language setting specified for the system.
    Note:  User-actionable events include audit events. However, not all logged events show up in the GUI. Those audit log entries that do not meet a certain severity threshold are logged by the system but do not appear in the GUI.
    System alert
    Information used by the Service personnel to diagnose or monitor the storage system status or behavior. These records are recorded in English only.
    Viewing and managing logs

    The logging features that are listed in the following table are available for storage systems.

    Table 2. Logging features
    Log roll-over
    When the storage system log system accumulates two million log entries, it purges the oldest 500K entries (as determined by log record time) to return to 1.5 million log entries. You can archive log entries by enabling remote logging so that log entries are uploaded to a remote network node where they can be archived or backed up. The Logging section provides more information.
    Logging levels
    Logging levels are not configurable for the storage system. Log levels can only be configured for exported log files as described in the Logging section.
    Alert integration
    You can view storage system alert information in the following ways:
    • View alerts only:
      • In Unisphere, go to Events > Alerts.
    • View log events:
      • Using the Unisphere CLI, type the command uemcli /event/alert/hist show.
      • In Unisphere, go to System > Service > Logs.
    External log management
    You can archive log entries by enabling remote logging so that log entries are uploaded to a remote network node where they can be archived or backed up. There, you can use tools such as syslog to filter and analyze log results. The Logging section provides more information.
    Time synchronization
    Log time is recorded in GMT format and is maintained according to the storage system time (which may be synchronized to the local network time through an NTP server).

    Remote logging options

    The storage system supports logging user/audit messages to a maximum of five remote hosts. The remote host must be accessible from the storage system, and security for the log information must be provided through network access controls or the system security at the remote host.

    By default, the storage system transfers log information on port 514 using UDP. The following remote logging settings are configurable through Unisphere. Log into Unisphere and click Settings > Management > Remote Logging.

    • Enable logging to a remote host.
    • Network name or IP address where the storage system sends remote log information.
    • Type of log messages to send. Use the Facility field to set the type of log messages. It is recommended that you select the User-Level Messages options.
    • Severity level of events to send to a remote host
    • Port number and type (UDP or TCP) to use for log transmission.
    Configuring a host to receive storage system log messages

    Before configuring remote logging for a storage system, you must configure each remote system to receive logging messages from the storage system. A root/administrator on the receiving computer can configure the remote syslog server or rsyslog server to receive log information by editing the syslog server or rsyslog server configuration file (syslogng.conf or rsyslog.conf) on the remote system.

    Note:  For more information on setting up and running a remote syslog server, refer to the documentation for the operating system running on the remote system.