FlashArray has a built-in syslog logging facility however, the storage system must be configured to forward messages to remote syslog servers such as vRealize Log Insight. The configuration may be done using command line interface or Graphical User Interface.
Command Line Interface
To forward syslog messages to remote syslog server (vRealize Log Insight) execute purelog command on FlashArray:
purelog create --uri URI NAME
where URI is a the URI of the remote syslog server and NAME is syslog server identification used by Purity.
The URI format is:
[protocol]://[host]:[port]
The NAME parameter is optional. vRealize Log Insight supports UDP and TCP protocols using port 514 and 1514, 6514 for TCP SSL connections.
for example:
purelog create --uri udp://10.21.211.105:514
Syslog configuration can be tested using the following command.
purelog test
Graphical User Interface
To forward syslog messages to remote syslog server (vRealize Log Insight) using Graphical User Interface navigate:
Settings ➤ System ➤ Syslog Servers ➤ Provide URI for syslog server ➤ '+' (plus sign)
Send a test message by selecting Test button.
Figure 3.
Successful transmission needs to be verified using Log Insight. Select Interactive Analytics and in the query field enter flasharray, optionally a second text query may be added by choosing + ADD FILTER with condition contains word test. The query will return pure_event_type test with This is a test message generated by Everpure FlashArray text.
Result of successful transmission is shown in Figure 4.
Figure 4.