how to get FN to also send important logs (messages) to remote SYSLOG?

[SMnasMAN]

11.2u5 (physcial box)

I have set my splunk server ip/port in the FN web gui and set it to debug level.

however im finding that on splunk (ie remote syslog) , im missing some of the most import / critial messages that are being logged in /var/log/messages (ie the FN web console footer).

how do i get these critical messages to be sent to syslog also?
(very surprised they are not already with a debug setting)

for example, messages like this are NOT being sent to remote syslog. (i think i need to add /var/log/messages to syslog.conf, but in a way that is proerp and consistest through reboots and updates); thanks

Code:

Sep  2 06:45:42 freenas zfsd: ZfsEvent::Process: Event for unknown vdev 3203759444463917272 queued
Sep  2 06:45:43 freenas (da0:mps0:0:59:0): CAM status: Command timeout
Sep  2 06:45:43 freenas (da0:mps0:0:59:0): Retrying command
Sep  2 06:45:43 freenas (da0:mps0:0:59:0): UNMAP. CDB: 42 00 00 00 00 00 00 00 18 00
Sep  2 06:45:43 freenas (da3:mps0:0:64:0): CAM status: CAM subsystem is busy
Sep  2 06:45:43 freenas (da3:mps0:0:64:0): READ(10). CDB: 28 00 0d a6 f3 b8 00 00 30 00
Sep  2 06:45:43 freenas (da3:mps0:0:64:0): Retrying command
Sep  2 06:45:43 freenas mps0: mpssas_action_scsiio: Freezing devq for target ID 64
Sep  2 06:45:43 freenas mps0: Unfreezing devq for target ID 59
Sep  2 06:45:44 freenas (da3:mps0:0:64:0): CAM status: CAM subsystem is busy
Sep  2 06:45:44 freenas (da3:mps0:0:64:0): Error 5, Retries exhausted

is no where to be found in splunk / remote syslogs.tks

 

[dlavigne]

Sounds like a bug if you already bumped up the Syslog level: https://www.ixsystems.com/documentation/freenas/11.2-U5/system.html#general.

If that is the case, please create a report at bugs.ixsystems.com and post the issue number here.