Steps For Configuring The Separate Log Server; Setting Firewall For Log Server - NEC Express 5800 Series Installation Manual

Chapter 3 Configuring the Separate Log Server
1.

Steps for Configuring the Separate Log Server

To use a log server separately, prepare a Linux server other than ftSys Management Appliance. To configure
the server to be used for log server, install NEC ESMPRO Agent on it, and provide various settings (e.g., editing
snmpd.conf, opening of port, and others). Refer to NEC ESMPRO Agent Installation Guide for detailed
information.
If you have not specified IP address or machine name of log server in Step 9 of Chapter 1 (1.11.2 Installing
Additional Packages), perform the steps described in Chapter 1 (2.3.2 If the IP address of Log Server or Host
Name has been Changed) so that the Linux server (log server) can be detected.
After configuring the server as described above, provide the following settings according to your environment.
1.1

Setting Firewall for Log Server

To forward logs from the ESXi server, use the 514/upd port. In the case of setting the firewall on the log server
side, set it to receive logs from the 514/upd port.
Examples
1. Add below to /etc/sysconfig/iptables.
-A INPUT –p udp –dport 514 –j ACCEPT
2. Restart iptables.
# service iptables restart
Express5800/R320d-E4, R320d-M4 Installation Guide (VMware 5.5)
Tips
If the separate log server is used, some event logs related to internal disk are not reported
because these logs are output to syslog of ftSys Management Appliance. If you install NEC
ESMPRO Agent and report table in ftSys Management Appliance and provide report
settings, these logs can be reported. However, logs related to degradation of internal disks
are reported without performing these steps.
1. Steps for Configuring the Separate Log Server
75