Forwarding events to syslog, remote SNMP manager, email, and other event services

You can configure Lenovo XClarity Administrator to forward events to connected applications that you have in your environment for aggregating and monitoring hardware status and runtime issues for your hardware environment. You can define the scope of events to be forwarded based on device, event class, event severity, and component.

About this task

Lenovo XClarity Administrator can forward events for one or more devices. For audit events, you can choose to forward all audit events or none. You cannot forward specific audit events. For hardware and management events, you can choose to forward events for one or more severities (critical, warning, and informational) and for one or more components (such as disk drives, processors, and adapters).

Lenovo XClarity Administrator uses event forwarders to forward events. An event forwarder includes information about the protocol to use, the recipient, the devices to monitor, and the events to forward. After you create and enable an event forwarder, Lenovo XClarity Administrator starts monitoring for incoming events based on the filter criteria. When a match is found, the associated protocol is used to forward the event.

The following protocols are supported:
  • Azure Log Analytics. Lenovo XClarity Administrator forwards the monitored events to over the network to Microsoft Azure Log Analytics.

  • Email. Lenovo XClarity Administrator forwards the monitored events to one or more email addresses using SMTP. The email contains information about the event, the host name of the source device, and links to the Lenovo XClarity Administrator web interface and Lenovo XClarity Mobile app.

  • FTP. Forwards monitored events over the network to an FTP server.

  • REST. Lenovo XClarity Administrator forwards the monitored events over the network to a REST Web Service.

  • SNMP. Lenovo XClarity Administrator forwards the monitored events over the network to a remote SNMP manager. SNMPv1 and SNMPv3 traps are supported.

    For information about the management information base (MIB) file that describes the SNMP traps Lenovo XClarity Administrator generates, see lenovoMgrAlert.mib file.

  • Syslog. Lenovo XClarity Administrator forwards the monitored events over the network to a central log server where native tools can be used to monitor the syslog.

You can create and enable up to 20 event forwarders to send events to specific recipients.

If XClarity Administrator is rebooted after event forwarders are configured, you must wait for the management server to regenerate internal data before events are forwarded correctly.

For XClarity Administrator v1.2.0 and later, Switches is included on the Events tab in the New Event Forwarder and Change Event Forwarder dialogs. If you upgraded to 1.2.0 or later from an earlier release, remember to update your event forwarders to include or exclude RackSwitch events as appropriate. This is necessary even if you selected the All Systems checkbox to select all devices.

Note: Events are not delivered if, for example, connectivity between Lenovo XClarity Administrator and the event forwarder is down or if the port is blocked.