Chat now with support
Chat with Support

syslog-ng Store Box 7.0.3 LTS - Administration Guide

Preface Introduction The concepts of SSB The Welcome Wizard and the first login Basic settings User management and access control Managing SSB Configuring message sources Storing messages on SSB Forwarding messages from SSB Log paths: routing and processing messages Configuring syslog-ng options Searching log messages Searching the internal messages of SSB Classifying messages with pattern databases The SSB RPC API Monitoring SSB Troubleshooting SSB Security checklist for configuring SSB Glossary

StorCLI's VD LIST (Virtual Drive)

Access
SNMP object: SSB-SNMP-MIB::ssbHardwareRaidVdAccess
Type: string

Community (v2c) /

Context (v3)

System
Short description: The value of StorCLI's 'Access' output in 'VD LIST'.
Cache
SNMP object: SSB-SNMP-MIB::ssbHardwareRaidVdCache
Type: string

Community (v2c) /

Context (v3)

System
Short description: The value of StorCLI's 'Cache' output in 'VD LIST'.
Consist
SNMP object: SSB-SNMP-MIB::ssbHardwareRaidVdConsist
Type: string

Community (v2c) /

Context (v3)

System
Short description: The value of StorCLI's 'Consist' output in 'VD LIST'.
Drive Group and Virtual Drive (DG/VD)
SNMP object: SSB-SNMP-MIB::ssbHardwareRaidVdDriveGroupAndVirtualDrive
Type: string

Community (v2c) /

Context (v3)

System
Short description: The value of StorCLI's 'DG/VD' output in 'VD LIST'.
Name
SNMP object: SSB-SNMP-MIB::ssbHardwareRaidVdName
Type: string

Community (v2c) /

Context (v3)

System
Short description: The value of StorCLI's 'Name' output in 'VD LIST'. The name of the virtual drive.
Scheduled Check Consistency (sCC)
SNMP object: SSB-SNMP-MIB::ssbHardwareRaidVdScheduledCheckConsistency
Type: string

Community (v2c) /

Context (v3)

System
Short description: The value of StorCLI's 'sCC' output in 'VD LIST'.
Size
SNMP object: SSB-SNMP-MIB::ssbHardwareRaidVdSize
Type: string

Community (v2c) /

Context (v3)

System
Short description: The value of StorCLI's 'Size' output in 'VD LIST'. The size of the virtual drive.
State
SNMP object: SSB-SNMP-MIB::ssbHardwareRaidVdState
Type: string

Community (v2c) /

Context (v3)

System
Short description: The value of StorCLI's 'State' output in 'VD LIST'. The type of the virtual drive.
Type
SNMP object: SSB-SNMP-MIB::ssbHardwareRaidVdType
Type: string

Community (v2c) /

Context (v3)

System
Short description: The value of StorCLI's 'TYPE' output in 'VD LIST'. The type of the virtual drive.
SSB-SNMP-MIB::ssbHardwareRaidVDTable
For which systems and configurations is it applicable? When this particular hardware supports this particular (syslog-ng Store Box Appliance 3000, syslog-ng Store Box Appliance 3500, syslog-ng Store Box Appliance 4000) RAID type.
Value change frequency The values in this table are not supposed to change.
Related issues and issue indicators If the value of table element ssbHardwareRaidVdState is other than Optl and there is no RAID synchronization (which is indicated by object value SSB-SNMP-MIB::ssbHardwareRaidSyncRate), it indicates a RAID status error.

Solution:

  • The statuses indicating that the RAID is in degraded mode probably indicate physical disk error. For technical assistance, contact our Support Team.

Monitoring software RAID

SNMP object: SSB-SNMP-MIB::ssbSoftwareRaid
Type: This is a grouping node

Community (v2c) /

Context (v3)

System
Short description: Detailed information about software Raid devices

Description: Monitor the software RAID of syslog-ng Store Box (SSB), responsible for providing disk availability if, for example, a disk fails. It is used to monitor the status of the disks in a legacy SSB (syslog-ng Store Box T1) appliance.

Available on SSB appliances, on the SNMP community provided by the boot-firmwares. That is, on the ID-based communities at the Basic Settings > Monitoring > SNMP agent settings page.

Software RAID device name
SNMP object: SSB-SNMP-MIB::ssbSoftwareRaidDeviceName
Type: string

Community (v2c) /

Context (v3)

System
Short description: Name of the software Raid device
Software RAID device status
SNMP object: SSB-SNMP-MIB::ssbSoftwareRaidDeviceStatus
Type: string

Community (v2c) /

Context (v3)

System
Short description: Status of the software Raid device (active / degraded / resync / resync-delayed)
Software RAID device RAID level
SNMP object: SSB-SNMP-MIB::ssbSoftwareRaidDeviceRaidLevel
Type: string

Community (v2c) /

Context (v3)

System
Short description: Current Raid level of the software Raid device
RAID synchronization progress
SNMP object: SSB-SNMP-MIB::ssbSoftwareRaidDeviceSyncProgress
Type: Integer32 (%)

Community (v2c) /

Context (v3)

System
Short description: Raid synchronization progress
RAID synchronization speed
SNMP object: SSB-SNMP-MIB::ssbSoftwareRaidDeviceSyncSpeed
Type: Integer32 (KiB/sec)

Community (v2c) /

Context (v3)

System
Short description: Raid sync speed
SSB-SNMP-MIB::ssbSoftwareRaidDeviceTable
For which systems and configurations is it applicable? When this particular hardware has a software RAID (legacy syslog-ng Store Box T1 appliance).
Value change frequency The values of these table elements rarely change. In particular, the table columns ssbSoftwareRaidDeviceSyncProgress and ssbSoftwareRaidDeviceSyncSpeed only have values in case of RAID synchronization.
Related issues and issue indicators

1. If ssbSoftwareRaidDeviceSyncProgress does not reach 100% for a long time, and the percentage or progress value does not change, either.

2. If the returned value for ssbSoftwareRaidDeviceSyncSpeed is too low or stops for a long time.

3. If ssbSoftwareRaidDeviceStatus returns degraded.

Solution:

Block device name
SNMP object: SSB-SNMP-MIB::ssbSoftwareRaidBlockDeviceName
Type: string

Community (v2c) /

Context (v3)

System
Short description: Name of the block device
Block device S.M.A.R.T health check status
SNMP object: SSB-SNMP-MIB::ssbSoftwareRaidBlockDeviceSMARTHealthCheckStatus
Type: string

Community (v2c) /

Context (v3)

System
Short description: S.M.A.R.T health check status for the block device
Block device temperature
SNMP object: SSB-SNMP-MIB::ssbSoftwareRaidBlockDeviceTemperature
Type: Integer32 (Celsius)

Community (v2c) /

Context (v3)

System
Short description: Current temperature of the block device
SSB-SNMP-MIB::ssbSoftwareRaidBlockDeviceTable
For which systems and configurations is it applicable? When this particular hardware has a software RAID (legacy syslog-ng Store Box T1 appliance).
Value change frequency

1. BlockDeviceTemperature may change depending on disk load. It is an ambient analog value, and thus continuously changing, but not problematic within a given value range. Note that manufacturing standards allow for a maximum of 60-70 °C, with a normal temperature range of 35-45 °C.

2. RAIDBlockDeviceSMARTHealthCheckStatus is not supposed to change. Ideally, it is supposed to return Passed. If it returns Failed, it indicates an issue.

Related issues and issue indicators

1. If BlockDeviceTemperature is too high for too long. Note that manufacturing standards allow for a maximum of 60-70 °C, with a normal temperature range of 35-45 °C.

2. If RAIDBlockDeviceSMARTHealthCheckStatus returns Failed.

Solution:

Monitoring web server, root CA and TSA certificates

Certain properties of the SSL certificates on Basic Settings > Management > SSL certificate can be monitored in a table format.

SNMP object: SSB-SNMP-MIB::ssbServerCertificateTable
Type: This is a grouping node

Community (v2c) /

Context (v3)

Data
Short description: Detailed information about syslog-ng Store Box(SSB) server certificates
Certificate table index
SNMP object: SSB-SNMP-MIB::ssbCertificateIndex
Type: index
Short description: The index of the certificate or certificate chain in this table.
Certificate Title field
SNMP object: SSB-SNMP-MIB::ssbCertificateTitle
Type: string

Community (v2c) /

Context (v3)

Data
Short description: The purpose SSB uses the certificate or certificate chain for.
Certificate "Subject" field
SNMP object: SSB-SNMP-MIB::ssbCertificateSubject
Type: string

Community (v2c) /

Context (v3)

Data
Short description: The 'Subject' field of the certificate. In case of certificate chains, the 'Subject' field of the end-entity certificate (also called the server certificate).
Certificate "Not before" field
SNMP object: SSB-SNMP-MIB::ssbCertificateNotBefore
Type: date-time string

Community (v2c) /

Context (v3)

Data
Short description: The 'Not before' field of the certificate in generalized ASN.1 format (YYYYMMDDhhmmssZ or YYYYMMDDhhmmss+hhmm or YYYYMMDDhhmmss-hhmm). In case of certificate chains, this is the latest 'Not before' date of the certificates in the chain.
Certificate "Not after" field
SNMP object: SSB-SNMP-MIB::ssbCertificateNotAfter
Type: date-time string

Community (v2c) /

Context (v3)

Data
Short description: The 'Not after' field of the certificate in generalized ASN.1 format (YYYYMMDDhhmmssZ or YYYYMMDDhhmmss+hhmm or YYYYMMDDhhmmss-hhmm). In case of certificate chains, this is the earliest 'Not after' date of the certificates in the chain.

Troubleshooting SSB

This section describes the tools to detect networking problems, and also how to collect core files and view the system logs of syslog-ng Store Box (SSB).

Topics:
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating