Anonymous_User Absent Member.
Absent Member.
363 views

No event from IBM AIX 5.3


SLM 1.2.0.2

I have to setup a SLM POC with IBM AIX

IBM AIX 5.3 is configured to send the syslog events to our SLM 1.2.0.2
box
in /etc/syslog.conf of AIX

Code:
--------------------

*.info @IP.OF.SLM.BOX
--------------------


and also in /etc/services, I changed the default syslog port(514) to
1514, because SLM listens for Syslog over udp on 1514.

after doing the above IBM AIX was available/visible under
https://slmbox:8443 > Collection > Event Sources... but with Generic
Collector, I only changed the type to IBM AIX.

Now problem is that SLM only shows 5 events without any meaningful
data, i,e those messages shows the garbage, the reason could be that
messages were received when
SLM was using Generic Collector, but as I have changed the Collector to
IBM AIX, no new messages are shown in SLM search. Even I restart the
syslog daemon on AIX multiple times, at least
SLM should have received and show us the logs about the syslog restart
activity in its search.

None of us(me and customer) are AIX or SLM experts

Anyone here esp experienced with AIX and SLM, please help/assist.

Regards
Muhammad Sharfuddin


--
sharfuddin
------------------------------------------------------------------------
sharfuddin's Profile: http://forums.novell.com/member.php?userid=63087
View this thread: http://forums.novell.com/showthread.php?t=453116

0 Likes
2 Replies
Anonymous_User Absent Member.
Absent Member.

Re: No event from IBM AIX 5.3

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Have you tried setting up the connector to write a Connector Dump to the
filesystem? The connector docs talk about setting this up, as do other
threads in this forum. If you do not see any events in this file after
setting this up and causing the events again then for some reason Log
Manager is not picking them up as you are expecting it to, but if you do
see events in there but not in the rest of the system (such as the view
of all events when searching) then the events may not be properly parsed
by the collector. Either way if you can post the connector dump
somewhere the issue can be reproduced in your (or another) system.

Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=cqMA
-----END PGP SIGNATURE-----
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: No event from IBM AIX 5.3


Thanks for your reply, and sorry for updating too late ;(

issue resolved, and everything working as expected 😉

As per the AIX Collector Guide:>
> Before beginning this procedure, connect to your AIX system, and:
> 1. Login as root user.
> 2. Edit the /etc/syslog.conf file and add the following line after the
> comments.
> *.info @<Sentinel Syslog Server IP>
> NOTE: In place of <Sentinel Syslog Server IP> specify the IP address of
> system where Sentinel Syslog server is running.
> 3. To restart the Syslog Service, enter the following AIX command as
> the root user.
> refresh -s syslogd
>


Thing started working when on AIX I ran:
Code:
--------------------

stopsrc -s syslogd
startsrc -s syslogd
--------------------


rather then
Code:
--------------------

refresh -s syslogd
--------------------


Thanks once again

Regards
Muhammad Sharfuddin

ab;2180547 Wrote:
>
> Have you tried setting up the connector to write a Connector Dump to
> the
> filesystem? The connector docs talk about setting this up, as do
> other
> threads in this forum. If you do not see any events in this file
> after
> setting this up and causing the events again then for some reason Log
> Manager is not picking them up as you are expecting it to, but if you
> do
> see events in there but not in the rest of the system (such as the
> view
> of all events when searching) then the events may not be properly
> parsed
> by the collector. Either way if you can post the connector dump
> somewhere the issue can be reproduced in your (or another) system.
>
> Good luck.
>



--
sharfuddin
------------------------------------------------------------------------
sharfuddin's Profile: http://forums.novell.com/member.php?userid=63087
View this thread: http://forums.novell.com/showthread.php?t=453116

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.