Customizing System Log Server Notifications Using the CLI
You can customize many aspects of the RSYSLOG notifications. This includes specifying which event types should trigger an alert notification, the frequency of alert notifications and the message format.
For a complete list of customization commands, see the fenotify rsyslog recipient <rname> prefer *
commands in the CLI Guide.
Prerequsites
- Admin or operator access to appliance
- Remote system log (RSYSLOG) server configured on the appliance. See: Adding an SNMP Trap Sink Using the CLI
Custom Alert Level
Set custom alert severity: fenotify rsyslog trap-sink <name> prefer message send-as <severity>
command.
For example, to send the trap sink server nx2500 notifications at the alert severity (recommended):
hostname (config) # fenotify syslog trap-sink nx2500 prefer message send-as alert
Delivery Frequency
Set the delivery frequency for all notifications fenotify rsyslog trap-sink <name> message delivery <frequency>
command.
For example, to send the trap sink server nx2500 notifications after each alert (recommended):
hostname (config) # fenotify syslog syslog trap-sink nx2500 message delivery per-event
Notification Order
Set the order in which notifications are sent: fenotify rsyslog trap-sink <name> prefer message item-order <order>
command.
For example,to send the trap sink server nx2500 notifications in the orer they arrive:
hostname (config) # fenotify syslog trap-sink nx2500 prefer message item-order constant-order
Syslog Facility
Set the syslog facility value for all notifications fenotify rsyslog default faclity <value>
command.
For example, to set the syslog facility to local 4 (recommended):
hostname (config) # fenotify syslog default facility local4
Custom Event Triggers
Use the following command to set the event types that will trigger an alert notification for the remote system log server:
fenotify rsyslog trap-sink <name> prefer notification <eventType>
Use the following command to remove the custom event triggers:
no fenotify rsyslog trap-sink <name> prefer notification <eventType>