NetApp Syslog Configuration Example

The default syslog settings on a NetApp are just to log locally.  If you want to log remotely, you need to edit the /etc/syslog.conf file.

To see the current configuration, use this command:

rdfile /etc/syslog.conf

The default on most NetApp controllers appears to be:

*.info

Here is an sample configuration file I use on my controllers:

wrfile /etc/syslog.conf
# Log everything level info or higher to /etc/messages
*.info                        /etc/messages
# Send it to the console too, so I can see it
*.info                        /dev/console
# Send it to my syslog server too
*.info                        @remotesysloghostname
^C

By putting *.info - all messages of INFO level and above will be logged.  /etc/messages will write to the messages file, /dev/console will output to the console, and @ will send those messages to a remote syslog server.

The wrfile will overwrite the existing file, and you can hit CTRL-C to exit the write file operation.

To verify the file updated, re-read the file.

rdfile /etc/syslog.conf

Shortly after you have updated this file, the syslogd will restart automatically as it detected changes to the configuration file.  You should see something written to /etc/messsages like:

rdfile /etc/messages

Thu Apr 17 01:28:30 PDT [HOSTNAME:kern.syslogd.restarted:info]: syslogd: Restarted.