...
With opEvents, any event can be handled from any source, and include escalations, etc. (opEvents running on a Master will carry out all actions as the master not as the slave)
Step 1 - Enable opHA Master to receive syslogs
a. Open /etc/rsyslog.conf
b. Verify you have these modules
Code Block |
---|
# Provides UDP syslog reception
$ModLoad imudp.so
$UDPServerRun 514
# Provides TCP syslog reception
$ModLoad imtcp.so
$InputTCPServerRun 514 |
c. We need to add a section to tell the NMIS master to receive the event log form the slave and where to store it. Under this section add:
Code Block |
---|
#slave NMIS servers use local1 by default, capture that into slave_event.log
local1.* /usr/local/nmis8/logs/slave_event.log |
d. Save the changes made to rsyslog.conf
e. Open /etc/sysconfig/rsyslog
f. Find the entry: SYSLOGD_OPTIONS="-c 5" and change SYSLOGD_OPTIONS="-c 4"
g. Restart the syslog service
Code Block |
---|
service rsyslogd restart |
This completes setup on the MASTER opHA Server.
Step 2 - Changes to the opHA SLAVE to send the syslog
a. Open /usr/local/nmis8/conf/Config.nmis
b. Locate this entry:
Code Block |
---|
'syslog' => {
'syslog_events' => 'true',
'syslog_facility' => 'local1',
'syslog_server' => 'YOURIPADDRESS:tcp:514',
'syslog_use_escalation' => 'false' |
c. Modify YOURIPADDRESS in 'syslog_server' to point to the MASTER opHA server.
d. Save changes to Config.nmis
e. Restart the syslog service
Code Block |
---|
service rsyslogd restart |
f. Test transmission of the syslog from the slave to the master
Code Block |
---|
/usr/local/nmis8admin/testsyslog.pl |