HP StorageWorks Scalable File Share - Manual (Page 73)

Viewing event logs 4–17
You can restrict the
show log
command to showing a small number of events by using the
recent
argument, as follows:
sfs> show log recent
The
show log
command is usually used to display events that have occurred in the past. However, you
can also use the command to display events as they occur, by entering the following command:
sfs> show log now
No output is displayed until an event occurs. To interrupt the command, press
Ctrl/c
.
You can use filters with the
show log
command to limit the events shown. For more information, see
Section 4.6.1.1 through Section 4.6.1.4.
4.6.1.1 Event filters
You can use one or more of the following filters with the show log command:
• The severity of events (
severity=
). For more information, see Section 4.6.1.2.
• The facility events are related to (
facility=
). For more information, see Section 4.6.1.3.
• The time an event occurred (
time=
)
• Event age (
age=
)
• Events for a specific server (
server=
)
• Events containing specific data (
data=
)
For examples of event filters, see Section 4.6.1.4.
4.6.1.2 Event severity
An indication of the severity of the event, and whether the event requires investigation or action, is provided
in the event record. You can filter the events based on the event severity, which is one of the following:
d (debug)
The event is recorded for debugging purposes.
i (info)
The event is recorded for information purposes only; for example, an event
record showing which LUNs are visible to a server as the server boots.
n (notice)
The event is a state change that is considered normal; for example, when a
server boots to a running state.
w (warn)
The event may require some investigation and repair; for example, when a
server loses one of its power supplies.
! (err)
The event is an unexpected occurrence; for example, a daemon fails to start.
!! (crit)
The event needs attention, to prevent possible problems; for example, a server
is not responding but its peer server is available.
!!! (emerg) The event needs immediate attention; for example, a server is not responding
and its peer server is also unavailable.
4.6.1.3 Event facility
The event record indicates the facility that the event is related to, and you can filter the events on the event
facility. There are two types of facilities, as follows:
• Standard facilities, including the
kern
,
daemon
,
cron
, and
auth
facilities.
• Facilities that are specific to HP SFS systems, including the
server
,
storage
,
local4
(cluster
manager), and
lustre
facilities.