Page 1 of 1

Remote Syslog TCP?

Posted: Fri Aug 21, 2020 7:59 am
by T16
We use vRealize Loginsight, which accepts syslog over port 514 for both TCP and UDP.

We need to set our 3par arrays to TCP on port 514.

The 3par does not seem to support this? The help blurb in the SP GUI says:

Sets the hostname or IP address and optionally the port of the remote syslog servers to which general events will be sent as syslog messages. When configuring the destination with both the IPv6 address and port, please note that the IPv6 address must be encapsulated by square brackets. Up to three servers can be specified. If the port is not configured one of the following default ports will be used: 514 for UDP, 601 for TCP, 6514 for TLS

Which reads like if I want 514 over TCP im out of luck? The SP itself allows you to select port and protocol perfectly well, but it seems the array does not?

Re: Remote Syslog TCP?

Posted: Fri Aug 21, 2020 9:53 am
by MammaGutt
From cli admin guide

3.To send all non-debug events to the syslog server (general mechanism), enter the following command:

setsys RemoteSyslogHost {{<hostname>|<IPaddr>}[:<port>]

Use a comma to separate multiple server specifications (up to three).


4.To send all security-related events to the syslog server for auditing purposes (security mechanism),enter the following command:

setsys RemoteSyslogSecurityHost {{<hostname>|<IPaddr>}[:<port>]


See "help setsys" for more details.