cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2245
Views
0
Helpful
6
Replies

Weird syslog format messages with Nexus 1000v

cocowalla
Level 1
Level 1

I'm trying out the Nexus 1000v, and have it configured to write logs to my syslog server. The thing is, the messages are in a weird format that my log management tools cannot parse. Here is an example:

<189>: 2012 Oct 21 15:22:40 UTC: %VSHD-5-VSHD_SYSLOG_CONFIG_I: Configured from vty by admin on unknown_session

I found the documentation rather amusing, where it states "The syslog client functionality is RFC-5424 compliant" - doesn't look like they've even read the RFC! This is closer to the format of the older (but more often found in the wild, RFC3164... though not compliant with that either :/

Anyway, I guess the main issue here is that the hostname of the 1000v is not being added to the logs (it is set in my config). Any ideas how I can fix this?

Thanks!

6 Replies 6

lwatta
Cisco Employee
Cisco Employee

Colin,

You are posting in the beta forum. If you are using production code you will get more views if you post in the Server Networking Forum.

Are you sure those messages are coming from the VSM. i just did a quick test. I created a port-profile and got

Oct 23 10:07:22 192.168.152.243 : 2012 Oct 23 14:46:36 UTC: %VMS-5-DVPG_CREATE: created port-group 'vlan-151' on the vCenter Server.

Oct 23 10:09:07 192.168.152.243 : 2012 Oct 23 14:48:21 UTC: %VIM-5-IF_ATTACHED: Interface Vethernet5 is attached to Network Adapter 1 of rsmall-linux-15-v on port 2 of module 6 with dvport id 193

Oct 23 10:09:08 192.168.152.243 : 2012 Oct 23 14:48:22 UTC: %ETHPORT-5-IF_UP: Interface Vethernet5 is up in mode access

I'm using the newly released 2.1 code. I don't have a dns entry for my VSM but it is sending the IP address in the syslog message.

Thanks, I'll post to the other forum as well, didn't realise I was in the wrong place

The messages are definately coming from the VEM.

show system vem feature level

gives me:

Current feature level: 4.2(1)SV1(5.2)

If you create a port-profile on the VSM do you get a syslog message similar to the one I showed above?

louis

What command do I need to use to specifically do that?

On the VSM run

config t

port-profile type veth syslog-test

switchport mode access

switch access vlan #

vmware port-group

no shut

state enabled

You should get a syslog message after you create it.

Didn't get any syslog message after doing that, other than a 'Configured from vty...'