How can I use EventReporter to forward the NetApp Event Log?

Support, Questions and Discussions on EventReporter

Moderator: alorbach

Google Ads


How can I use EventReporter to forward the NetApp Event Log?

Postby jeffcai » Thu Feb 04, 2010 5:42 pm

Hi, there,

Can I use EventReporter to forward the NetApp Event Log to a syslog server?

If yes, how can I do that?

Thanks,
Jeff
jeffcai
Avarage
 
Posts: 10
Joined: Thu Feb 04, 2010 5:38 pm

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby rgerhards » Thu Feb 04, 2010 5:44 pm

Hi Jeff,

yes, this is possible, and a description is available here:

http://www.eventreporter.com/common/en/ ... syslog.php

Rainer
rgerhards
Site Admin
 
Posts: 3806
Joined: Thu Feb 13, 2003 11:57 am

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby jeffcai » Thu Feb 04, 2010 5:47 pm

I have read it, but after I enable remote EventLog monitoring, and enter the NetApp filer's IP address, click the Verify, I get following message:

Error while verifying remote EventLog access

Error number:0

Any idea?

Thanks
Jeff
jeffcai
Avarage
 
Posts: 10
Joined: Thu Feb 04, 2010 5:38 pm

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby rgerhards » Thu Feb 04, 2010 5:51 pm

Ah, I see. The article fails to explain the permissions issue. Please see here:

http://www.eventreporter.com/common/en/ ... errors.php

Please let us know if that solves the issue.

Thanks,
Rainer
rgerhards
Site Admin
 
Posts: 3806
Joined: Thu Feb 13, 2003 11:57 am

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby jeffcai » Fri Feb 05, 2010 5:26 am

Changed the service to log on as Domain administrator, but still get the same error.

Thanks,
Jeff
jeffcai
Avarage
 
Posts: 10
Joined: Thu Feb 04, 2010 5:38 pm

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby jeffcai » Fri Feb 05, 2010 6:33 am

I enable the debug log, it is said that:

| Error | CLibCacheListEntry|GetAndSetLibrary: Failed to load library "\\10.128.13.23\C$\etc\system32\MsObjs.dll"- GetLastError: 2

It is NetApp filer, not a windows server, just copy the MsObjs.dll from windows server to the folder?

Thanks,
Jeff
jeffcai
Avarage
 
Posts: 10
Joined: Thu Feb 04, 2010 5:38 pm

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby alorbach » Fri Feb 05, 2010 2:20 pm

Hi,

please enable the option "Read EventLog Sources from local machine" in your EventLog Monitor settings, then EventReporter will use the local dll's (if available).

best regards,
Andre Lorbach
alorbach
Site Admin
 
Posts: 1627
Joined: Thu Feb 13, 2003 11:55 am

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby jeffcai » Mon Feb 08, 2010 11:00 am

After selected "Read EventLog Sources from local machine", the verify still failed.

Although verify failed, I can forward the event log from NetApp filer to syslog server.

I still have one problem, the date field in the syslog seems not correct, not the original date of the event.
jeffcai
Avarage
 
Posts: 10
Joined: Thu Feb 04, 2010 5:38 pm

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby alorbach » Mon Feb 08, 2010 11:54 am

Hi,

you can ignore the verify function in this case.
If you mean the date in the Syslog header of the message, this will be the current time by default.
You may either include the %timegenerated% property in the forwarded EventLog Message, or use a custom Syslog header like this:


RFC 5424 Sample:
Code: Select all
<%syslogprifac%>%syslogver% %timegenerated:::date-rfc3339% %source% %syslogappname% %syslogprocid% %syslogmsgid% %syslogstructdata%


best regards,
Andre Lorbach
alorbach
Site Admin
 
Posts: 1627
Joined: Thu Feb 13, 2003 11:55 am

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby jeffcai » Mon Feb 08, 2010 4:36 pm

Hi,

It works. Thanks.

But sometimes evntslog.exe caused CPU usage at 100%. Any idea?

Best Regards,
Jeff
jeffcai
Avarage
 
Posts: 10
Joined: Thu Feb 04, 2010 5:38 pm

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby alorbach » Mon Feb 08, 2010 4:49 pm

Possible while processing the Events. Have you lowered the overrun protection time to 0 milliseconds?

best regards,
Andre Lorbach
alorbach
Site Admin
 
Posts: 1627
Joined: Thu Feb 13, 2003 11:55 am

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby rgerhards » Mon Feb 08, 2010 6:29 pm

Please let me also add that by default EventReporter runs with low priority, so it will yield CPU immediately if some other process needs it.
rgerhards
Site Admin
 
Posts: 3806
Joined: Thu Feb 13, 2003 11:57 am

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby jeffcai » Tue Feb 09, 2010 2:32 am

What I mean should be:

After running a few while, evntslog.exe causes CPU running at 100% until it be stopped.

Jeff
jeffcai
Avarage
 
Posts: 10
Joined: Thu Feb 04, 2010 5:38 pm

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby alorbach » Tue Feb 09, 2010 9:40 am

Which Version of EventReporter are you using, and are there any error events from EventReporter in the application EventLog?
alorbach
Site Admin
 
Posts: 1627
Joined: Thu Feb 13, 2003 11:55 am

Re: How can I use EventReporter to forward the NetApp Event Log?

Postby jeffcai » Tue Feb 09, 2010 1:33 pm

EventReporter 11.0.328

Now when I stop the service, and restart it, the CPU will go to 100% quickly.

Nothing error in the Event Log.
jeffcai
Avarage
 
Posts: 10
Joined: Thu Feb 04, 2010 5:38 pm

Google Ads


Next

Return to EventReporter

Who is online

Users browsing this forum: No registered users and 1 guest

cron