Steps For Configuring The Separate Log Server; Setting Firewall For Log Server - NEC Express5800/R320g-E4 Installation Manual

Chapter 3 Configuring the Separate Log Server
1.

Steps for Configuring the Separate Log Server

To use a log server separately, prepare a Linux server other than ftSys Management Appliance. To configure
the server to be used for log server, install NEC ESMPRO Agent on it, and provide various settings (e.g., editing
snmpd.conf, opening of port, and others). Refer to NEC ESMPRO Agent Installation Guide for detailed
information.
If you have not specified IP address or machine name of log server in Step 9 of Chapter 1 (1.10.2 Installing
Additional Packages), perform the steps described in Chapter 1 (2.3.2 If the IP address of Log Server or Host
Name has been Changed) so that the Linux server (log server) can be detected.
After configuring the server as described above, provide the following settings according to your environment.
1.1

Setting Firewall for Log Server

To forward logs from the ESXi server, use the 514/upd port. In the case of setting the firewall on the log server
side, set it to receive logs from the 514/upd port.
Examples
1. Add below to /etc/sysconfig/iptables.
-A INPUT –p udp –dport 514 –j ACCEPT
2. Restart iptables.
# service iptables restart
If the separate log server is used, some event logs related to internal hard disk drive are not
Tips
reported because these logs are output to syslog of ftSys Management Appliance. If you
install NEC ESMPRO Agent and report table in ftSys Management Appliance and provide
report settings, these logs can be reported. However, logs related to degradation of internal
hard disk drives are reported without performing these steps.
Express5800/R320g-E4, R320g-M4 Installation Guide (VMware)
1. Steps for Configuring the Separate Log Server
77