Hi Neal,

Yep, that was a fumble. Still, my point remains, even after I straighten out my typos:

loghost> grep fci.device 20* | wc -l 0 loghost> grep scsi.cmd.aborted 20* | wc -l 0 loghost>

Yet, in xxxx.ems.gz:

<LR d="10Jan2012 12:50:21" n="toaster-a" pn="toaster-b" t="1326228621" id="1316410940/599716" p="3" s="C=1U" o="isp2400_asyncd_0" vf="" replay="1"> <scsi_cmd_abortedByHost_1 deviceType="Disk" deviceName="0c.0L187" ha_status="0x12" cdb="0x2a:6fe6d95c:0124"/> </LR>

<LR d="10Jan2012 12:58:55" n="toaster-b" pn="toaster-a" t="1326229135" id="1316405680/420420" p="6" s="C=1T" o="isp2400_timeout_2" vf=""> <fci_device_quiesce_1 adapterName="0a" deviceType="Disk" deviceName="0a.0 (0x03000000)" lun="178" cdb="0x5f:0601" retryCount="0"/> </LR>

Or, if you prefer, the summarized version from the asup message itself:

scsi.cmd.abortedByHost:ERR 10Jan2012 12:52:36 37 0 0 0 0 fci.device.quiesce:INFO 10Jan2012 13:00:16 149 0 0 0 0

Many, I might venture to say 'most', of the EMS messages do, in fact, show up in syslog ... but not all.

?

--sk

On 1/29/2012 8:12 AM, Neal Jones wrote:

Stuart, It looks like you left the "i" or of "fci"; didn't you intend to enter "grep -e fci.device syslog"?

Cheers, Neal Jones

From: Stuart Kendrick skendric@fhcrc.org To: "toasters@teaparty.net" toasters@teaparty.net Date: 01/29/2012 10:07 AM Subject: EMS Events in syslog Sent by: toasters-bounces@teaparty.net

---

Some EMS Events show up in syslog:

cf.fm.takeoverComplete:WARN 10Jan2012 12:58:22 cf.fsm.releasingReservations:INFO 10Jan2012 12:58:24

loghost> grep -e cf.fm.takeoverComplete -e cf.fsm.releasingReservations syslog Jan 10 12:58:22 toaster-b-svif1 [toaster-b (takeover): cf.fm.takeoverComplete:warning]: Cluster monitor: takeover completed Jan 10 12:58:24 toaster-b-svif1 [toaster-b (takeover): cf.fsm.releasingReservations:info]: Cluster monitor: Releasing disk reservations in preparation for giveback

But others do not:

fci.device.timeout:ERR 10Jan2012 12:52:36 fci.device.quiesce:INFO 10Jan2012 13:00:16

loghost> grep -e fc.device syslog loghost>

syslog.conf: *.info /etc/messages *.info @loghost.company.com

In fact, examining my toaster logs for the last two years: loghost> ls 20* toaster-logs-from-2010.txt toaster-logs-from-2011.txt loghost> grep cf.fm.takeover toaster-logs-from* | wc -l 70 loghost> grep fc.device toaster-logs-from-* | wc -l 0 loghost>

How do I persuade EMS to send /everything/ to syslog?

--sk

Stuart Kendrick FHCRC _______________________________________________ Toasters mailing list Toasters@teaparty.net http://www.teaparty.net/mailman/listinfo/toasters