XenServer 7.0: 100% external logs (0% written to USB)

FATeknollogee

Looks like @DustinB3403 & @BRRABill have "solved" this mystery.
s/o to @scottalanmiller for also assisting in the mystery solving process.

Can we start a clean thread with the required steps ?

BRRABill

@FATeknollogee said in XenServer 7.0: 100% external logs (0% written to USB):

Looks like @DustinB3403 & @BRRABill have "solved" this mystery.
Can we start a clean thread with the required steps ?

In XS7, yes.

Setup XS7 as normal.
In XenCenter, enable external logging to the external machine you want it to go.
Edit /etc/rsyslog.d/xenserver.conf to comment out all references to local sources. It should look like the example below...

That should be it.


# Suppress duplicate messages and report "Last line repeated n times"
$RepeatedMsgReduction on

# Don't rate-limit messages - this isn't the right way to go about
# reducing log size!
$IMUXSockRateLimitInterval 0
$SystemLogRateLimitInterval 0

# Ensure critical and higher level errors are logged synchronously.
#*.crit;mail.none;authpriv.none;cron.none               /var/log/crit.log

# Log by facility.
#kern.*                                                 -/var/log/kern.log
#daemon.*                                               -/var/log/daemon.log
#user.*                                                 -/var/log/user.log

# The authpriv file has restricted access.
#authpriv.*                                             -/var/log/secure

# Log all the mail messages in one place.
#mail.*                                                 -/var/log/maillog

# Log cron stuff
#cron.*                                                 -/var/log/cron

# Save boot messages also to boot.log
#local7.*                                               /var/log/boot.log

# Xapi rbac audit log echoes to syslog local6
#local6.*                                               -/var/log/audit.log

# Xapi, xenopsd echo to syslog local5
#local5.*                                               -/var/log/xensource.log

# V6d echo to syslog local4
#local4.*                                               -/var/log/v6d.log

# xenstore access to syslog local3
#local3.info                                            -/var/log/xenstored-access.log

# Storage Manager to syslog local2
#local2.*                                               -/var/log/SMlog

# xcp-rrdd-plugins (info and above) to local0
#local0.info                                            -/var/log/xcp-rrdd-plugins.log

# ignore default rules

*.* @10.0.4.7
*.* ~

BRRABill

To clarify #3 above, I mean to edit the file xenserver.conf located in the /etc/rsyslog.d folder on your XE host. This file can be access through the console in XC (XenCenter) or by accessing the host with a program such as PUTTY. (The preferred way.)

You can then use an editor such as vi to edit the file. You will want to put # in front of the local directories, similar to what is shown in my example.

scottalanmiller

@FATeknollogee said in XenServer 7.0: 100% external logs (0% written to USB):

Looks like @DustinB3403 & @BRRABill have "solved" this mystery.

By "they solved it" you mean "Scott said what to edit out and they did it and it worked?"

BRRABill

@scottalanmiller said in XenServer 7.0: 100% external logs (0% written to USB):

@FATeknollogee said in XenServer 7.0: 100% external logs (0% written to USB):

Looks like @DustinB3403 & @BRRABill have "solved" this mystery.

By "they solved it" you mean "Scott said what to edit out and they did it and it worked?"

Well, it DIDN'T work in 6.5.

And in my defense I have been working and testing this for some while.

scottalanmiller

@BRRABill said in XenServer 7.0: 100% external logs (0% written to USB):

@scottalanmiller said in XenServer 7.0: 100% external logs (0% written to USB):

@FATeknollogee said in XenServer 7.0: 100% external logs (0% written to USB):

Looks like @DustinB3403 & @BRRABill have "solved" this mystery.

By "they solved it" you mean "Scott said what to edit out and they did it and it worked?"

Well, it DIDN'T work in 6.5.

And in my defense I have been working and testing this for some while.

But this thread is about 7

FATeknollogee

@scottalanmiller You didn't read post #1...

scottalanmiller

@FATeknollogee said in XenServer 7.0: 100% external logs (0% written to USB):

@scottalanmiller You didn't read post #1...

But I did. What part of it do you think that I missed?

FATeknollogee

@scottalanmiller The 2nd line I "edited" with a s/o!