Trying to get real time change detection working for Aruba controllers. RTCD seems to work OK, however, the syslog messages coming from the controllers are being truncated.
Wireshark shows the full syslog being received by my Orion server
however the resulting syslog entry in Orion shows:
note that the command that was issued, enclosed in brackets in the message, <write memory> was truncated. That's the key I want to Alert on for RTCD.
The syslog server settings don't have many knobs to turn. Am I missing something somewhere else?
Is this Aruba specific, or does Orion truncate other hardware types syslog messages?
For troubleshooting- try Syslog viewer\File\Settings - uncheck "Remove Message Type from Syslog Message" . This will also affect every other syslog message, so we don't recommend it to leave this on for long.
You would then probably see this message:
usl77wc98 <usl77wc98 10.140.26.82> fpcli: USER:test.pacman.local\pacman COMMAND:<write memory > -- command executed successfully
"Remove Message Type from Syslog Message" - finds first occurrence of string in brackets <*> sets it in DB as Message Type, then it removes every occurrence of this string in syslog message.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.