Steps For Configuring The Separate Log Server; Setting Firewall For Log Server - NEC Express5800/R320f-E4 Installation Manual

Chapter 3 Configuring the Separate Log Server
1.

Steps for Configuring the Separate Log Server

To use a log server separately, prepare a Linux server other than ftSys Management Appliance. To configure
the server to be used for log server, install NEC ESMPRO Agent on it, and provide various settings (e.g., editing
snmpd.conf, opening of port, and others). Refer to NEC ESMPRO Agent Installation Guide for detailed
information.
If you have not specified IP address or machine name of log server in Step 9 of Chapter 1 (1.11.2 Installing
Additional Packages), perform the steps described in Chapter 1 (2.3.2 If the IP address of Log Server or Host
Name has been Changed) so that the Linux server (log server) can be detected.
After configuring the server as described above, provide the following settings according to your environment.
1.1

Setting Firewall for Log Server

To forward logs from the ESXi server, use the 514/upd port. In the case of setting the firewall on the log server
side, set it to receive logs from the 514/upd port.
Examples
1. Add below to /etc/sysconfig/iptables.
-A INPUT –p udp –dport 514 –j ACCEPT
2. Restart iptables.
# service iptables restart
82
Express5800/R320e-E4, R320e-M4, R320f-E4, R320f-M4 Installation Guide (VMware)
Tips
If the separate log server is used, some event logs related to internal hard disk drive are
not reported because these logs are output to syslog of ftSys Management Appliance. If
you install NEC ESMPRO Agent and report table in ftSys Management Appliance and
provide report settings, these logs can be reported. However, logs related to degradation of
internal hard disk drives are reported without performing these steps.
1. Steps for Configuring the Separate Log Server