1
Votes

OC200 Syslog message is RFC non-compliant

 
1
Votes

OC200 Syslog message is RFC non-compliant

OC200 Syslog message is RFC non-compliant
OC200 Syslog message is RFC non-compliant
2025-04-16 20:22:05 - last edited 2025-04-23 18:47:50
Model: OC200  
Hardware Version: V2
Firmware Version: 5.18

Hello, I'm working on the syslog collector using Grafana Alloy to send to Loki.

 

However, i;ve got issue that log message from Omada is not fully compliant with RFC5424  (https://datatracker.ietf.org/doc/html/rfc5424#section-6.2.3)

To be specific, the timestamp did not comply RFC3339 .

 

Log message from Omada to my log collectors : 

 

01:37:35.531863 IP static.vnpt.vn.33216 > 172.17.0.8.syslog: SYSLOG local0.info, length: 149

E.../f@.4...q.2...........-.<134>1 2025-04-17 01:36:46 Omada Controller_P1VCP_OC200 - - - DHCP Server allocated IP address 192.168.1.109 for the client[MAC: 3e-d3-e4-ab-5d-63].

 

 

The correct format of RFC5424/RFC3399 should be : 2025-04-15T01:36:46.000000Z

 

 

 

#1
Options
9 Reply
Re:OC200 Syslog message is RFC non-compliant
2025-04-18 08:05:30 - last edited 2025-04-23 18:47:50

Hi  @Hahahihi 

 

We had aware of this issue and it should be optimized in the latest firmware.

Please update your controller to the latest and see if the format is correcrt or not.

#2
Options
Re:OC200 Syslog message is RFC non-compliant
2025-04-18 16:05:16 - last edited 2025-04-18 16:09:14

  @Vincent-TP 

 

Hello, 

 

we are already running Firmware version 5.15.8.12 - automatically update. But the log still shows the same. 

 

the hardware controller of OC200 is 

1.34.2 Build 20250110 Rel.75707 (Stable)

#3
Options
Re:OC200 Syslog message is RFC non-compliant
2025-04-21 03:47:25

Hi  @Hahahihi 

 

We had a newer version with Built-in Omada SDN Controller v5.15.20.38.

 

Please update to it and see it that time format corrects.

#4
Options
Re:OC200 Syslog message is RFC non-compliant
2025-04-21 03:55:17

  @Vincent-TP 

 

Hello Vincent, I have tried to update but it's not yet available. 

 

#5
Options
Re:OC200 Syslog message is RFC non-compliant
2025-04-21 04:01:02

Hi  @Hahahihi 

 

This is because the firmware is not released on the sg website yet. Thanks for bringing ths to us, I will feedback this to our relevant team.

 

For now, you can update it manually.

 

1. Download the firmware from en website;

2.  Manually upload the firmware from Global View > System Settings > Hardware Controller > Manual Upgrade:

 

#6
Options
Re:OC200 Syslog message is RFC non-compliant
2025-04-21 04:03:52
Thank you, I will schedule maintenance windows to upgrade few sites and keep you update.
#7
Options
RE:OC200 Syslog message is RFC non-compliant
2025-04-23 18:40:41
(I'm running the software controller and encountering the same issue with Grafana)
#8
Options
RE:OC200 Syslog message is RFC non-compliant
2025-04-23 18:47:32

  @Matva 

 

Hi Mate, 


So we are on the same boat. 

What is your Log collector ? 

 

 

My original plan is using grafana Alloy as the Log Collector but it strictly require RFC compliance hence my temporary solution is using Datadog Vector as the log collector.

 

My interim arch : 

Omada ---> Vector ---> Loki ----> Grafana. 

 

give it a try and hit me if you need any help. 

 

#9
Options
RE:OC200 Syslog message is RFC non-compliant
2025-04-23 18:55:43
Using Loki. Don´t know the exact error message I got anymore but it was indeed due to the logs not being exactly RFC compliant. So hoping for a fix in the Sofware controller as well :) Currently running latest version 5.15.20.18
#10
Options