NFM-P server log forwarding to syslog servers

Description

You can configure the NFM-P to forward the NFM-P server log entries in the EmsServer.log file to a remote syslog server.

To enable NFM-P server log forwarding to a remote syslog server, you must configure the server-logs-to-remote-syslog parameters using samconfig on each NFM-P main server.

Note: A syslog server address can be an IPv4 or IPv6 address, or a hostname or FQDN that the local NSP cluster and the NFM-P can resolve.

To secure the server log forwarding, you must generate a TLS certificate on the syslog server and transfer the certificate to the ca-cert-path location that you specify in the server-logs-to-remote-syslog section of samconfig. You must also set the secure parameter in the section to true. During initialization, the NFM-P imports the certificate to the local trust store.

“What is the syslog record format for NSP application log forwarding?” in the NSP System Administrator Guide describes the NFM-P server log record format.

Fault tolerance

Only a standalone or primary NFM-P main server can forward server logs. When the standby main server in a redundant deployment assumes the primary role after a main server activity switch or switchover, the new primary main server forwards the logs to the syslog server specified in the local main server configuration.

The greatest fault tolerance in a redundant deployment is achieved if you specify a different syslog server in each main server configuration.