Network Management

Last XX syslog and trap resources (widgets) are not available for LA or OLV

Out of the box queries for syslogs are not displaying information.

First published date

11/9/2018 4:21 PM

Last published date

10/27/2021 3:30 PM

Overview

Upon installation of LA or Orion Log Viewer, Out of box widgets for legacy last xx syslog and trap resources are no longer available in the Summary and Node Details pages, option to select the resource is available but no results will be available. 

Product section

Log Analyzer

Cause

LA 1.0 replaces the legacy syslog and traps services, but only provides a subset of the legacy functionality. and will not display syslogs for OLV or LA.

Resolution

The resolution for this issue is to execute a SolarWinds Query Language (SWQL) query  in a Custom Query
widget.

note: You can see that this query is for Orion.OLM.LogEntry. thay are OLV and LA, and not the Legacy syslogs.

To view the last XX syslog OLV/LA messages:

  1. In your Orion Web Console dashboard, navigate to Customize Page > Add Widget, and then search for Custom Query. 
  2. Drag the Custom Query widget to your page, and then click Done Adding Widgets.
  3. In the Custom Query widget, click Edit.
  4. Enter your custom SWQL query. For example:  
    SELECT TOP 10 DateTime, le.LogMessageSource.Caption, le.LogMessageSource.IPAddress, Message
FROM Orion.OLM.LogEntry le
WHERE le.LogType.Type = 'Syslog'
ORDER BY LogEntryID DESC;
  5. Enter a title for your query, and then click Submit.


To view the syslog summary:

  1. Drag a custom query widget to your page, and then click Done Adding Widgets.
  2. In the Custom Query widget, click Edit.
  3. Enter your custom SWQL query. For example:   
    SELECT TOP 5 le.LogMessageSource.Caption, COUNT(le.LogEntryID) as LogCount
FROM Orion.OLM.LogEntry le
WHERE le.LogType.Type = 'Syslog'
GROUP BY le.LogMessageSource.Caption
HAVING COUNT(le.LogEntryID) > 0
ORDER BY LogCount DESC;
  4. Enter a title for your query, and then click Submit.                                                                                               


To view node related XX syslog messages on the Node Details page:

  1. Drag a custom query widget to your page, and then click Done Adding Widgets.
  2. In the Custom Query widget, click Edit.
  3. Enter your custom SWQL query. For example: 
    SELECT TOP 10 DateTime, le.LogMessageSource.Caption, le.LogMessageSource.IPAddress, Message
FROM Orion.OLM.LogEntry le
WHERE le.NodeID = ${NodeID} AND le.LogType.Type = 'Syslog'
ORDER BY LogEntryID DESC
  4. Enter a title for your query, and then click Submit.


Note: You can add a similar set of widgets for Traps (see below). The LM workaround is the same except the "LogType Where" clause is replaced with le.LogType.Type = 'Traps'

.

Disclaimer: Scripts are not supported under any SolarWinds support program or service. Scripts are provided AS IS without warranty of any kind. SolarWinds further disclaims all warranties including, without limitation, any implied warranties of merchantability or of fitness for a particular purpose. The risk arising out of the use or performance of the scripts and documentation stays with you. In no event shall SolarWinds or anyone else involved in the creation, production, or delivery of the scripts be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or inability to use the scripts or documentation.