TCP暗号化プロトコルでログ転送の作成に失敗する
環境
ONTAP 9
問題
TCP 暗号化プロトコルでログ転送の作成に失敗する。
::> cluster log-forwarding create -destination <server_IP> -protocol tcp-encrypted –facility user
Testing network connectivity to the destination host server_IP.
Error: command failed: Cannot connect to destination host server_IP, port 443 from node "node_name". Reason: Failed TLS/SSL handshake: certificate verify failed: unable to get local issuer certificate. Verify connectivity to desired host or skip the connectivity check with the "-force" parameter.
イベントログ転送の場合:
cluster::*> event notification destination check -node node-01 -destination-name <destination>
Connectivity check failed for destination "destination" on node "node-01": Look for "EMS::SYSLOG_HANDLER" messages in the node's /mroot/etc/
log/mlog/notifyd.log file.
cluster::*> node run -node node-01 -command rdfile /etc/log/mlog/notifyd.log
0000001d.00326949 016b1f00 Thu Jul 31 2025 04:22:42 +00:00 [kern_notifyd:info:3051] 0x80be4c400: 0: ERR: EMS::SYSLOG_HANDLER: Cannot send an ems message to syslog destination: <destination> Reason: cannot add the destination to the syslog_client. Error: Failed TLS/SSL handshake: certificate
verify failed: unable to get local issuer certificate