Unsolved
1 Rookie
•
64 Posts
0
30
Audit modify: missing --config-syslog-servers option?
Running OneFS 9.5.0.6 and when I attempt to use the command as shown in the 9.5.x CLI Admin Guide:
isi audit settings modify --syslog-forwarding-enabled=yes \
--config-syslog-servers=<ip>:<port> --syslog-audit-events=close,create,delete --
zone=zone3
I'm met with "unknown option config-syslog-servers". I am only looking to syslog forward protocol audits, but I enabled config audits just to see if it would work and it does (see below).
Not sure what I'm missing. Where do you configure the syslog server for protocol audits if not isi audit settings modify?
Protocol Auditing Enabled: Yes
Audited Zones: zone3
CEE Server URIs: -
Hostname: myHostname
Config Auditing Enabled: No
Config Syslog Enabled: Yes
Config Syslog Servers: mySyslog.mydomain.tld
Config Syslog TLS Enabled: No
Config Syslog Certificate ID:
Protocol Syslog Servers: -
Protocol Syslog TLS Enabled: No
Protocol Syslog Certificate ID:
System Syslog Enabled: No
System Syslog Servers: -
System Syslog TLS Enabled: No
System Syslog Certificate ID:
Auto Purging Enabled: No
Retention Period: 180
System Auditing Enabled: No
DELL-Sam L
Moderator
Moderator
•
7K Posts
0
April 18th, 2024 16:33
Hello Ryan_CSULB,
It is best to open a support case for this issue.
Ryan_CSULB
1 Rookie
1 Rookie
•
64 Posts
0
June 3rd, 2024 18:01
@DELL-Sam L ha... yeah I did but was told it wasn't a break-fix and sent along to my account executive. So far I haven't heard back on this particular issue, although the AE did get back on some other things I asked about.
We'll be moving to OneFS 9.7.1 in two months, so perhaps it will magically reappear. I was hoping someone in the community on the 9.5.x family might be able to corroborate what I was (not) seeing.