ONTAP Discussions

Syslog Event Source IPs


Guys, I have 2 separate C-Mode 9.3 clusters that syslog events to an external syslog server. This is generally working fne and both have the exact same policy defined. However, on one cluster I get the following:


  • syslogs with source IP for each node and each cluster IP i.e. each node is sending syslogs and each cluster is

On the other one though I only get logs from the nodes IPs and not the cluster. Is this configureable  somewhere? 


Re: Syslog Event Source IPs


-Each node is responsible for its EMS logging and as such will send via the node mgmt interface. Its possible we may be using the cluster mgmt LIF due to a connection problem with the node mgmt LIF. Or possibly routing is not correct.


-Suggest to open a support case so that we can investigate further.

-When opening a case provide the following: 

--Cluster SNs
--::>event destination show -instance

Also , please review the following articles:




Please also check that we can ping and traceroute from the syslog server to the cluster_mgmt LIF and the node_mgmt LIF


Earn Rewards for Your Review!
GPI Review Banner
All Community Forums