Enable Syslog Notifications for Escalations

Topics marked with * relate to features available only in vFabric Hyperic.

About Syslog Notifications in Alert Escalations

You can enable Hyperic to issue a syslog notification as a step in an alert escalation. The notification will log a line in the following format:

SyslogAction[ALERT_ID]: DB_1 4 META/PRODUCT/VERSION RESOURCE_NAME : ALERT_NAME - ALERT_CONDITION

where:

  • ALERT_ID is a number representing the alert ID in HQ.

  • META is the "Meta" string configured for the syslog action in the escalation.

  • PRODUCT is the "Product" string configured for the syslog action in the escalation.

  • VERSION = is the "Version" string configured for the syslog action in the escalation.

  • RESOURCE_NAME identifies the resource for which the alert was fired.

  • ALERT_NAME identifies the alert definition that fired the alert.

  • ALERT_CONDITION is the alert condition and reported measurement that led to the alert firing, for example, "If Availability > 0.0 (actual value = 1)")

Enable Syslog Notifications

You enable syslog notification in the HQ Server's server-log4j.xml file, in SERVER_HOME/conf.

Enable the Syslog Receiver

syslogd, the syslog receiver, must be enabled to accept remote logging, even on localhost. This can be done by passing -r to syslogd at startup.

Enable Syslog Appender

In the appenders section of the file, uncomment these lines and change the logger level to INFO instead of ERROR.

<appender name="SYSLOG" class="org.apache.log4j.net.SyslogAppender">
   <errorHandler class="org.apache.log4j.helpers.OnlyOnceErrorHandler"/>
   <param name="Facility" value="SYSLOG"/>
   <param name="FacilityPrinting" value="true"/>
   <param name="SyslogHost" value="localhost"/>
   <layout class="org.apache.log4j.PatternLayout">
      <param name="ConversionPattern" value="%c{1}[%r]: %m%n"/>
   </layout>
</appender>

<logger name="org.hyperic.hq.bizapp.server.action.log.SyslogAction">
  <level value="INFO" />
  <appender-ref ref="SYSLOG" />
</logger>

Note: If you want to configure a different Facility for the appender, note that it must be syslog-configured.

If server-log4j.xml does not contain the lines shown above, add them in the appenders section. All appenders in the file must be grouped together.

Restart Hyperic Server

After the Hyperic Server is restarted, syslog notification will be presented as an option when you set up an escalation.