ONTAP 9.12.1 commands

50←PDF
  • ONTAP 9.12.1 commands(CA08871-263en.pdf)
  • cluster log-forwarding create

    Create a log forwarding destination

    Availability: This command is available to cluster administrators at the admin privilege level.

    Description

    The cluster log-forwarding create command creates log forwarding destinations for remote logging.

    Parameters

    -destination <Remote InetAddress> - Destination Host

    Host name or IPv4 or IPv6 address of the server to forward the logs to.

    [-port <integer>] - Destination Port

    The port that the destination server listen on.

    [-protocol {udp-unencrypted|tcp-unencrypted|tcp-encrypted}] - Log Forwarding Protocol

    The protocols are used for sending messages to the destination. The protocols can be one of the following values:

    • _ udp-unencrypted _ - User Datagram Protocol with no security

    • _ tcp-unencrypted _ - Transmission Control Protocol with no security

    • _ tcp-encrypted _ - Transmission Control Protocol with Transport Layer Security (TLS)

    [-ipspace <IPspace>] - IPspace of Destination

    The IPspace of the destination server.

    [-verify-server {true|false}] - Verify Destination Server Identity

    When this parameter is set to true , the identity of the log forwarding destination is verified by validating its certificate. The value can be set to true only when the tcp-encrypted value is selected in the protocol field. When this value is true the remote server might be validated by OCSP. The OCSP validation for cluster logs is controlled with the security config ocsp enable -app audit_log and security config ocsp disable -app audit_log .

    [-facility <Syslog Facility>] - Syslog Facility

    The syslog facility to use for the forwarded logs.

    [-force <true>] - Skip the Connectivity Test

    Normally, the cluster log-forwarding create command checks that the destination is reachable via an ICMP ping, and fails if it is not reachable. Setting this value to true bypasses the ping check so that the destination can be configured when it is unreachable.

    Examples

    This example causes audit logs to be forwarded to a server at address 192.168.0.1, port 514 with USER facility.

    cluster1::> cluster log-forwarding create -destination 192.168.0.1 -port 514 -facility user
    Top of Page