How to configure VPlex for a Remote Syslog Server

Darren, have a look at this thread:

How to update VPLEX Management Server DNS settings

I will be opening a support SR for syslog and will let the forum know how I fair

Hi Robert,

Thanks for keeping me in the loop and I enjoyed reading your rant on your blog ☺

Cheers

darren

This is the reply I have received so far on this:

VPlex does have a syslog daemon that can be used to send logs to a centralized syslog server. Since this is not officially supported, we can only forward some logs to the external server which might not be relevant. VPlex firmware log are the ones which needs monitoring for events related to network. I would recommend setting up SNMP traps on VPlex and having an SNMP trap receiver on the server end for alerts related to network issues. Do keep in mind that an alert will be sent only once in 8 hours. For instance two consecutive network outage in less than 8 hours and only once the alert will be sent. That can be however modified by importing a custom script developed by VPlex Engineering.

I have received some additional clarification on this from EMC support:

Q] As for the syslogging. Do you mean that we cannot syslog out the firmware log? Ø  Yes, we don’t have any official document on this and I tried it out in our lab as well and all that I could collect was messages log that we can find in /var/log folder. Ø  And this log is not that helpful as compared to firmware.log

Got some more replies from here and there, and this seems definate:

Question: Is it possible to syslog out the witness ipsec_check.log  ? è Reached out to folks across the globe and they said VPlex simply doesn’t support syslogging any log out to another server.

Syslog support for VPLEX is something that many other VPLEX customer have asked about as well. Things like Splunk, VMware vRealize Log Insight, and countless other log analytics tools rely upon syslog in order to have various things send their logs to a central server for analysis and correlation among other infrastructure things. Best I can say is that it's on Product Management's backlog in terms of things to add to the product, I haven't seen it targeted to a specific release. Your EMC rep can fill out what's called a RFE (Request for Enhancements)