Viewing Faults and Logs

Viewing the Fault Summary

Procedure

Step 1

From the Apps drop-down list, select System.

Step 2

Select the Faults and Logs tab.

Step 3

In the Navigation pane, click Fault Summary menu.

Step 4

In the Faults Summary area, review the following properties:

Note

 

To view the exact summary, in the Search Logs field, enter the text related to the faults. Alternatively, from the Severity drop-down list, choose the specific severity type.

Name Description

Time

The time when the fault occurred.

Severity

This can be one of the following:

  • Critical

  • Informational

  • Major

  • Minor

  • Warning

Code

The unique identifier assigned to the fault.

Domain Name

The distinguished name (Domain Name) is a hierarchical representation of the device endpoint and its instance on the server.

Probable Cause

The unique identifier associated with the event that caused the fault.

Description

More information about the fault.

It also includes a proposed solution.

Viewing Faults History

Procedure

Step 1

From the Apps drop-down list, select System.

Step 2

Select the Faults and Logs tab.

Step 3

In the Navigation pane, click Fault History menu.

Step 4

In the Faults History area, review the following properties:

Tip

 

To view the exact fault history, in the Search Logs field, enter the text related to the faults. Alternatively, from the Severity drop-down list, choose the specific severity type.

Name Description

Time

The time when the fault occurred.

Severity

This can be one of the following:

  • Emergency

  • Alert

  • Critical

  • Error

  • Warning

  • Notice

  • Informational

  • Debug

Probable Cause

The unique identifier associated with the event that caused the fault

Description

More information about the fault.

It also includes a proposed solution.

Viewing System Event Logs

Procedure

Step 1

From the Apps drop-down list, select System.

Step 2

Select the Faults and Logs tab.

Step 3

In the Navigation pane, click System Event Log menu.

Step 4

In the System Event Log area, review the following information:

Tip

 

To view the exact system event log, in the Search Logs field, enter the text related to the system event. Alternatively, from the Severity drop-down list, choose the specific severity type.

Name Description

Time column

The date and time the event occurred.

Severity column

The severity field includes both text and a color-coded icon. For the icon, green indicates normal operation, yellow is informational, and warning, critical, and non-recoverable errors are shown in shades of red.

Description column

A description of the event.

SEL Fullness Indicator

Displays, in percentage, the used space in the System Event Log tab. The percentage is calculated with 3008 entries as the reference (the System Event Log tab always displays only the most recent 3008 system events). For example, if there are 1504 entries, then the percentage is shown as 50.

After the first set of 3008 entries are reached, the status is always displayed as 100% until the SEL is cleared.

Clear Logs button

Allows you to clear the system even log entries.

Viewing the Cisco IMC Log

Procedure

Step 1

From the Apps drop-down list, select System.

Step 2

Select the Faults and Logs tab.

Step 3

In the Navigation pane, click Cisco IMC Log menu.

Step 4

In the Cisco IMC Log tab, review the following information:

Tip

 

To view the exact Cisco IMC log, in the Search Logs field, enter the text related to the Cisco IMC logs. Alternatively, from the Severity drop-down list, choose the specific severity type.

Name Description

Time column

The date and time the event occurred.

Severity column

The event severity. This can be one of the following:

  • Emergency

  • Alert

  • Critical

  • Error

  • Warning

  • Notice

  • Informational

  • Debug

Source column

The software module that logged the event.

Description column

A description of the event.

Clear Logs button

Allows you to clear Cisco IMC log entries.

Logging Controls

Viewing Logging Controls

Procedure

Step 1

From the Apps drop-down list, select System.

Step 2

Select the Faults and Logs tab.

Step 3

In the Navigation pane, click Logging Controls menu.

Step 4

In the Logging Controls area, review the following information:

Table 1. Local Logging Area

Name

Description
Minimum Severity to Report drop-down list

The drop-down list lets you specify the lowest level of messages that will be included in the local log. You can select one of the following:

  • Emergency

  • Alert

  • Critical

  • Error

  • Warning

  • Notice

  • Informational

  • Debug

Table 2. Upload Status Area

Name

 Description

Certificate Upload Status

Displays the status of the certificate upload.

By default, the value is NONE.

When the certificate upload is complete, the value is displayed as COMPLETED.

Certificate Upload Progress

Displays the progress of the certificate upload.

By default, the value is None.

When the certificate upload is complete, the value is displayed as 100%.

Table 3. Remote Logging Area
Name Description

+Add Server button

Allows you to add a row for a new server. Once you click +Add Server, you can enter the values to create a server and click Save.

Delete button

Allows you to delete an entry. Select the entry which you wish to delete, and click Delete.

Secure Syslog toggle button or column

If the status is Enabled, Cisco IMC makes a secure, encrypted outbound connection to remote syslog servers supporting secure connectivity for logging.

Note

 

If the status is Enabled, then the Protocol field is disabled by default.

This property functions as a toggle button when creating or editing a server entry.

Host Name/IP Address field or column

The address of the Syslog server on which the Cisco IMC log should be stored. You can set an IPv4 or IPv6 address or a domain name as the remote system address.

This property functions as a field when creating or editing a server entry.

Port field or column

A destination port number of the Syslog server, which ranges from 1 to 65535. The default port number is 514.

This property functions as a field when creating or editing a server entry.

Protocol drop-down list or column

The transport layer protocol for transmission of Syslog messages. The protocol can be one of the following:

  • TCP

  • UDP

This property functions as a drop-down list when creating or editing a server entry.

Handshake Status field

If Secure Syslog featurs is enabled, then Cisco IMC performs SSL handshake to verify if the certificate is for the correct Syslog server.

Minimum Severity drop-down list or column

Specifies the lowest level of messages that will be included in the remote logs. This can be one of the following severity levels:

  • Emergency

  • Alert

  • Critical

  • Error

  • Warning

  • Notice

  • Informational

  • Debug

This property functions as a drop-down list when creating or editing a server entry.
Send Test SysLog button

Allows you to send a test Cisco IMC log to the configured remote Syslog servers.
Edit icon

Allows you to edit the properties of Remote Syslog server.

You can edit and save the following properties:

  • Host Name/IP Address

  • Port

  • Protocol

  • Minimum Severity
Delete button

Allows you to delete the Syslog server.

Sending the Cisco IMC Log to a Remote Server

You can configure profiles for one or two remote syslog servers to receive log entries.

Before you begin

  • The remote syslog server must be configured to receive logs from a remote host.

  • The remote syslog server must be configured to receive all types of logs, including authentication-related logs.

  • The remote syslog server's firewall must be configured to allow syslog messages to reach the syslog server.

Procedure

Step 1

From the Apps drop-down list, select System.

Step 2

Select the Faults and Logs tab.

Step 3

In the Navigation pane, click Logging Controls menu.

Step 4

In the Remote Logging area, you can either create a new server entry or edit an entry to enable secure syslog.

Step 5

To add a new server and enable secure syslog, click Add Server and to edit an existing server entry, click the edit icon at the end of the row and update the following properties:

Table 4. Remote Logging Area
Name Description

+Add Server button

Allows you to add a row for a new server. Once you click +Add Server, you can enter the values to create a server and click Save.

Delete button

Allows you to delete an entry. Select the entry which you wish to delete, and click Delete.

Secure Syslog toggle button or column

If the status is Enabled, Cisco IMC makes a secure, encrypted outbound connection to remote syslog servers supporting secure connectivity for logging.

Note

 

If the status is Enabled, then the Protocol field is disabled by default.

This property functions as a toggle button when creating or editing a server entry.

Host Name/IP Address field or column

The address of the Syslog server on which the Cisco IMC log should be stored. You can set an IPv4 or IPv6 address or a domain name as the remote system address.

This property functions as a field when creating or editing a server entry.

Port field or column

A destination port number of the Syslog server, which ranges from 1 to 65535. The default port number is 514.

This property functions as a field when creating or editing a server entry.

Protocol drop-down list or column

The transport layer protocol for transmission of Syslog messages. The protocol can be one of the following:

  • TCP

  • UDP

This property functions as a drop-down list when creating or editing a server entry.

Handshake Status field

If Secure Syslog featurs is enabled, then Cisco IMC performs SSL handshake to verify if the certificate is for the correct Syslog server.

Minimum Severity drop-down list or column

Specifies the lowest level of messages that will be included in the remote logs. This can be one of the following severity levels:

  • Emergency

  • Alert

  • Critical

  • Error

  • Warning

  • Notice

  • Informational

  • Debug

This property functions as a drop-down list when creating or editing a server entry.
Send Test SysLog button

Allows you to send a test Cisco IMC log to the configured remote Syslog servers.
Edit icon

Allows you to edit the properties of Remote Syslog server.

You can edit and save the following properties:

  • Host Name/IP Address

  • Port

  • Protocol

  • Minimum Severity
Delete button

Allows you to delete the Syslog server.

Step 6

Click Save Changes.

Configuring the Cisco IMC Log Threshold

Procedure

Step 1

From the Apps drop-down list, select System.

Step 2

Select the Faults and Logs tab.

Step 3

In the Navigation pane, click Logging Controls menu.

Step 4

In the Local Logging area, use the Minimum Severity to Report drop-down list to specify the lowest level of messages that will be included in the log.

Table 5. Local Logging Area

Name

Description
Minimum Severity to Report drop-down list

The drop-down list lets you specify the lowest level of messages that will be included in the local log. You can select one of the following:

  • Emergency

  • Alert

  • Critical

  • Error

  • Warning

  • Notice

  • Informational

  • Debug

Note

 

Cisco IMC does not log any messages with a severity below the selected severity. For example, if you select Error, then the log will contain all messages with the severity Emergency, Alert, Critical, or Error. It will not show Warning, Notice, Informational, or Debug messages.

Sending a Test Cisco IMC Log to a Remote Server

Before you begin

  • The remote syslog server must be configured to receive logs from a remote host.

  • The remote syslog server must be configured to receive all types of logs, including authentication-related logs.

  • The remote syslog server's firewall must be configured to allow syslog messages to reach the syslog server.

Procedure

Step 1

From the Apps drop-down list, select System.

Step 2

Select the Faults and Logs tab.

Step 3

In the Navigation pane, click Logging Controls menu.

Step 4

In the Remote Logging area, click Send Test Syslog.

A test log is sent to the configured remote servers.

Managing the Remote Syslog Certificate

You can upload a remote syslog certificate to Cisco UCS C-series servers. You can upload the certificate to one or two Cisco UCS C-series servers.

Uploading a Remote Syslog Certificate

You can upload the Remote Syslog Certificate to one or two Cisco UCS C-series servers.

Before you begin

  • You must be logged is as an admin to perform this procedure.

  • If you select Local option, the certificate file to be uploaded must reside on a locally accessible file system.

  • The following certificate formats are supported:

    • .crt

    • .cer

    • .pem

Procedure

  Command or Action Purpose

Step 1

From the Apps drop-down list, select System.

Step 2

Select the Faults and Logs tab.

Step 3

In the Navigation pane, click Logging Controls menu.

Step 4

In the Remote Logging area, select the Syslog server for which the Remote Syslog Certificate must be uploaded.

Step 5

Click the Upload Certificate button.

The Upload Remote Syslog Certificate dialog box opens.

Step 6

Select any of the following options to select the certificate:

  • Remote

  • Local

  • Paste

Table 6. Remote

Name

Description

Remote button

Select this option when you want to upload the certificate from a remote location.

Server IP/Hostname field

Server details from where you want to upload the certificate.

Upload Protocol button

Select one of the following protocols.

  • TFTP

  • FTP

  • SCP

  • SFTP

  • HTTP

Note

 

If you select FTP, SCP or SFTP, you will be prompted to enter your username and password.

Path and Filename field

File path where the certificate file resides on the server along with the filename.

Username field

User name for your remote server.

Password field

Password for your remote server.

Upload button

Allows you to upload the certificate.

Table 7. Local

Name

Description

Local button

Select this option when you want to upload the certificate from your local machine.

Click Browse and navigate to the certificate that you want to upload.

Upload button

Allows you to upload the certificate.

Table 8. Paste

Name

Description

Paste button

Opens a text box that allows you to copy the entire content of the Syslog certificate and paste it in the Paste text field.

Upload button

Allows you to upload the certificate.

You can view the Certificate Upload Status and Certificate Upload Progress in the Upload Status area.

Deleting a Remote Syslog Certificate

You can delete a Remote Syslog Certificate from the server.

Before you begin

You must be logged is as an admin to perform this procedure.

Procedure

  Command or Action Purpose

Step 1

From the Apps drop-down list, select System.

Step 2

Select the Faults and Logs tab.

Step 3

In the Navigation pane, click Logging Controls menu.

Step 4

In the Remote Logging area, select the Syslog server for which the Syslog certificate to be deleted.

Step 5

Click Delete Certificate.

Step 6

Follow the system prompts to confirm deletion.