vmwNsxTAuditLogHealthRemoteLoggingServerError

VMWARE-NSX-MIB · .1.3.6.1.4.1.6876.120.1.0.24.0.3

Object

notification
Log messages to logging server vmwNsxTDataCenterHostnameOrIPAddressWithPort (vmwNsxTDataCenterEntityId)
cannot be delivered possibly due to an unresolvable FQDN, an invalid TLS
certificate or missing NSX appliance iptables rule.
          
Action required:
1. Ensure that vmwNsxTDataCenterHostnameOrIPAddressWithPort is the correct hostname or
IP address and port.
2. If the logging server is specified using a FQDN, ensure the FQDN is resolvable
from the NSX appliance using the NSX CLI command `nslookup <fqdn>`. If not
resolvable, verify the correct FQDN is specified and the network DNS server has
the required entry for the FQDN.
3. If the logging server is configured to use TLS, verify the specified certificate
is valid. For example, ensure the logging server is actually using the certificate
or verify the certificate has not expired using the openssl command
`openssl x509 -in <cert-file-path> -noout -dates`.
4. NSX appliances use iptables rules to explicitly allow outgoing traffic. Verify
the iptables rule for the logging server is configured properly by invoking the
NSX CLI command `verify logging-servers` which re-configures logging server
iptables rules as needed.
5. If for any reason the logging server is misconfigured, it should be deleted
using the NSX CLI `del logging-server <hostname-or-ip-address[:port]>
proto <proto> level <level>` command and re-added with the correct configuration.

Context

MIB
VMWARE-NSX-MIB
OID
.1.3.6.1.4.1.6876.120.1.0.24.0.3
Type
notification
Status
current
Parent
vmwNsxTAuditLogHealthFeature
Siblings
3

Syntax

No syntax metadata recorded.

Values & Constraints

No enumerated values or constraints recorded.

Related Objects

Sibling Objects
Notification Objects