Configuring important EMS events to forward notifications to a syslog server

To log notifications of the most severe events on a syslog server, you must configure the EMS to forward notifications for events that signal important activity.

Before you begin

DNS must be configured on the cluster to resolve the syslog server name.

About this task

If your environment does not already contain a syslog server for event notifications, you must first create one. If your environment already contains a syslog server for logging events from other systems, then you might want to use that one for important event notifications.

You can perform this task any time the cluster is running by entering the commands on the ONTAP command line.

Procedure

Create a syslog server destination for important events: event notification destination create -name syslog-ems -syslog syslog-server-address
Configure the important events to forward notifications to the syslog server: event notification create -filter-name important-events -destinations syslog-ems