- Community Home
- >
- Storage
- >
- Midrange and Enterprise Storage
- >
- HPE 3PAR StoreServ Storage
- >
- Re: 3PAR remote syslog Message Severity
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-27-2015 12:31 PM - edited 03-30-2015 07:02 AM
03-27-2015 12:31 PM - edited 03-30-2015 07:02 AM
3par remote syslog Message Severity
We forward all syslogs to remote server. 3PAR 3.1.3 MU2 seems to have a bug where it classifies the following message as Critical.
3PAR_###### cli_command es_vss_4_windows VSS Snapshot creation success
Is there a way to chage Message Severity behaviour for certain logs?
- Tags:
- syslog
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-30-2015 10:08 AM
03-30-2015 10:08 AM
Re: 3par remote syslog Message Severity
HI,
PF the attached message syslog settings
PS
To assign points on this post? Click the white Thumbs up below!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-31-2015 09:35 AM
03-31-2015 09:35 AM
Re: 3PAR remote syslog Message Severity
Based on what Prakash Singh_1 attached, can you find the command in showeventlog that is being sent?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-02-2015 06:58 AM - edited 04-02-2015 06:59 AM
04-02-2015 06:58 AM - edited 04-02-2015 06:59 AM
Re: 3PAR remote syslog Message Severity
Hi Prakash,
Thank you, I've remote syslog configured already.
Hi Dennis,
Yes, I was able to track it in the showeventlog
Time : 2015-02-24 07:32:50 EST
Severity : Informational
Type : CLI command executed
Message : {3parrm edit all {{0 4}} -1 10.*.*.100 8613} {userevent -type command -severity major -class notify -component es_vss_4_windows -comp_name VSS {VSS Snapshot creation success}} {}
As you can see 3par forwards it with "Major" severity .
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-02-2015 12:57 PM - edited 04-02-2015 12:59 PM
04-02-2015 12:57 PM - edited 04-02-2015 12:59 PM
Re: 3PAR remote syslog Message Severity
>I was able to track it in the showeventlog
This was the command that created the event. There should be the real event with major close by.
It seems this was created by some recovery manager: 3parrm
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-02-2015 01:40 PM
04-02-2015 01:40 PM
Re: 3PAR remote syslog Message Severity
Yes, you're correct. This account is used by 3PAR Recovery Manager for SQL, which takes snapshots every hour and replicates it to second array.
There is an event with major, generated by command above. Here's what it looks like:
Time : 2015-04-02 07:33:19 EDT
Severity : Informational
Type : Notification
Message : Start snap vss0001**7_rw_040******242 (id=6815) from parent vss0001**7_ro_0402******42 (id=6813) on nodes 0x03
Time : 2015-04-02 07:33:19 EDT
Severity : Informational
Type : CLI command executed
Message : {3parrm edit all {{0 4}} -1 10.*.*.50 30035} {userevent -type command -severity major -class notify -component es_vss_4_windows -comp_name VSS {VSS Snapshot creation success}} {}
Time : 2015-04-02 07:33:19 EDT
Severity : Major
Type : CLI command executed
Message : VSS Snapshot creation success
I am following you now; Recovery Manager software has a bug because it's issuing this command:
userevent -type command -severity major -class notify -component es_vss_4_windows -comp_name VSS {VSS Snapshot creation success}
It should be:
userevent -type command -severity informational -class notify -component es_vss_4_windows -comp_name VSS {VSS Snapshot creation success}
I will open ticket with HP and notify about this bug.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-03-2015 05:42 AM
04-03-2015 05:42 AM
Re: 3PAR remote syslog Message Severity
>It should be: userevent -type command -severity informational
Or at least not major.