Start a Conversation

Unsolved

1 Rookie

 • 

64 Posts

30

April 17th, 2024 22:34

Audit modify: missing --config-syslog-servers option?

Running OneFS 9.5.0.6 and when I attempt to use the command as shown in the 9.5.x CLI Admin Guide:

isi audit settings modify --syslog-forwarding-enabled=yes \
--config-syslog-servers=<ip>:<port> --syslog-audit-events=close,create,delete --
zone=zone3

I'm met with "unknown option config-syslog-servers".  I am only looking to syslog forward protocol audits, but I enabled config audits just to see if it would work and it does (see below).

Not sure what I'm missing. Where do you configure the syslog server for protocol audits if not isi audit settings modify?

     Protocol Auditing Enabled: Yes
                 Audited Zones: zone3
               CEE Server URIs: -
                      Hostname: myHostname
       Config Auditing Enabled: No
         Config Syslog Enabled: Yes
         Config Syslog Servers: mySyslog.mydomain.tld
     Config Syslog TLS Enabled: No
  Config Syslog Certificate ID:
       Protocol Syslog Servers: -
   Protocol Syslog TLS Enabled: No
Protocol Syslog Certificate ID:
         System Syslog Enabled: No
         System Syslog Servers: -
     System Syslog TLS Enabled: No
  System Syslog Certificate ID:
          Auto Purging Enabled: No
              Retention Period: 180
       System Auditing Enabled: No

Moderator

 • 

7K Posts

April 18th, 2024 16:33

Hello Ryan_CSULB,

It is best to open a support case for this issue.

1 Rookie

 • 

64 Posts

June 3rd, 2024 18:01

@DELL-Sam L​ ha... yeah I did but was told it wasn't a break-fix and sent along to my account executive. So far I haven't heard back on this particular issue, although the AE did get back on some other things I asked about.

We'll be moving to OneFS 9.7.1 in two months, so perhaps it will magically reappear.  I was hoping someone in the community on the 9.5.x family might be able to corroborate what I was (not) seeing.

No Events found!

Top