Page History

...

With opEvents, any event can be handled from any source, and include escalations, etc.  (opEvents running on a Master will carry out all actions as the master not as the slave)

Step 1 - Enable opHA Master to receive syslogs
a. Open /etc/rsyslog.conf
b. Verify you have these modules

# Provides UDP syslog reception
$ModLoad imudp.so
$UDPServerRun 514

# Provides TCP syslog reception
$ModLoad imtcp.so
$InputTCPServerRun 514

c. We need to add a section to tell the NMIS master to receive the event log form the slave and where to store it. Under this section add:

#slave NMIS servers use local1 by default, capture that into slave_event.log
local1.* /usr/local/nmis8/logs/slave_event.log

d. Save the changes made to rsyslog.conf
e. Open  /etc/sysconfig/rsyslog
f. Find the entry: SYSLOGD_OPTIONS="-c 5" and change SYSLOGD_OPTIONS="-c 4"
g. Restart the syslog service

service rsyslogd restart

This completes setup on the MASTER opHA Server.

Step 2 - Changes to the opHA SLAVE to send the syslog

a. Open /usr/local/nmis8/conf/Config.nmis
b. Locate this entry:

'syslog' => {
    'syslog_events' => 'true',
    'syslog_facility' => 'local1',
    'syslog_server' => 'YOURIPADDRESS:tcp:514',
    'syslog_use_escalation' => 'false'

c. Modify YOURIPADDRESS in 'syslog_server' to point to the MASTER opHA server.

d. Save changes to Config.nmis

e. Restart the syslog service

service rsyslogd restart

f. Test transmission of the syslog from the slave to the master

/usr/local/nmis8admin/testsyslog.pl