One of the three APIC controllers is not sending syslogs

[ChandanG]

We have three APIC controllers in a cluster. One of them is not sending any log to the external logging server. Other two are sending logs as usual. Is this normal behaviour? 

Also do the leaf and spine switches also sends logs separately to external server, or the APICs only will take care of it?

Thanks

[Robert Burns]

Which version of ACI and model of APIC are you running?
Is there any Firewall/devices between the APICs Management and syslog destination?

From the problem APIC, jump onto the CLI and test sending a syslog message:

apic1# logit severity 1 dest-grp XXXXX server yy.yy.yy.yy "THIS IS A TEST FROM APICX"
Where XXXXX is the destination group you configure and yy.yy.yy.yy is the IP address of your SYSLOG server.
This will at least confirm reachability.

Robert

[ChandanG]

Hi Robert,

Thanks for looking into this.
The APIC version is 4.2(6d), and model is - APIC-SERVER-M3
There is no issue in network reachability from the problematic APIC and remote Syslog server, as test from the APIC using "logit" command is successful. But other than this test log, not seeing anything it is sending. Whereas the other two APIC controllers are sending multiple logs.

Thanks
Chandan