使用 TCP 加密协议创建日志转发失败

最后更新
另存为PDF

Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用于

ONTAP 9

问题描述

使用 TCP 加密协议创建日志转发失败。

::> cluster log-forwarding create -destination <server_IP> -protocol tcp-encrypted –facility user
 Testing network connectivity to the destination host server_IP.                                                          
 Error: command failed: Cannot connect to destination host server_IP, port 443 from node "node_name". Reason: Failed TLS/SSL handshake: certificate verify failed: unable to get local issuer certificate. Verify connectivity to desired host or skip the connectivity check with the "-force" parameter.

对于事件日志转发：

cluster::*> event notification destination check -node node-01 -destination-name <destination> Connectivity check failed for destination "destination" on node "node-01": Look for "EMS::SYSLOG_HANDLER" messages in the node's /mroot/etc/ log/mlog/notifyd.log file.

cluster::*> node run -node node-01 -command rdfile /etc/log/mlog/notifyd.log

0000001d.00326949 016b1f00 Thu Jul 31 2025 04:22:42 +00:00 [kern_notifyd:info:3051] 0x80be4c400: 0: ERR: EMS::SYSLOG_HANDLER: Cannot send an ems message to syslog destination: <destination> Reason: cannot add the destination to the syslog_client. Error: Failed TLS/SSL handshake: certificate verify failed: unable to get local issuer certificate