Generating combined event logs in an information handling system
A method, an information handling system (IHS), and an event logging system generate combined event logs in an IHS. The method includes receiving, via a remote access controller (RAC), a tagged log containing operating system (OS) event data. A hardware log containing hardware event data is retrieved from a RAC memory. The tagged log and the hardware log are combined to form a combined event log containing both OS event data and hardware event data in a uniform format. The combined event log is stored to the RAC memory.
1. A computer-implemented method of providing a combined event log in an information handling system (IHS), the method comprising:
receiving, via a remote access controller (RAC) from a processor, a tagged log containing operating system (OS) event data, the tagged log generated by the processor by:
retrieving, via a processor, an OS log and a mapping table from a system memory, the OS log containing at least one OS event and the mapping table containing at least one subsystem component event corresponding to the OS event, mapping the at least one OS event from the OS log to the at least one subsystem component event based on the mapping table, and
generating the tagged log based on the at least one subsystem component event; retrieving, from a RAC memory, a hardware log containing hardware event data; combining the tagged log and the hardware log to form the combined event log containing both OS event data and hardware event data in a uniform format; storing the combined event log to the RAC memory;
identifying if the combined event log contains an event that requires notification to a management device; and in response to identifying that the combined event log contains an event requiring notification to a managing device: generating a first event notification;
transmitting, via a network, the first event notification to the management device.
2. The method of claim 1 , further comprising:
storing, by the processor, the tagged log to the system memory; and
transmitting the tagged log to the RAC.
3. The method of claim 2 , wherein the tagged log further comprises:
a first event message identifier;
a first event severity value; and
a first event source identifier.
4. The method of claim 3 , wherein the first event message identifier is generated by concatenating a first value denoting a first component subsystem, a second value representing a first event source and a third value corresponding to an OS event identifier, and the first event message identifier represents the uniform format for both the OS event data and hardware event data.
5. The method of claim 1 , wherein the mapping table further comprises at least one of:
an OS severity level;
a hardware severity level; and
an alert.
6. The method of claim 1 , wherein combining the tagged log and the hardware log to form the combined event log further comprises:
appending the tagged log to the hardware log in the order that the tagged log is received by the RAC.
7. An information handling system (IHS) comprising:
a processor communicatively coupled to a system memory;
a remote access controller (RAC) communicatively coupled to the processor and to a RAC memory device, the RAC including first firmware executing thereon to provide a combined event log, wherein the first firmware configures the RAC to:
receive, from the processor, a tagged log containing operating system (OS) event data;
retrieve from the RAC memory device, a hardware log containing hardware event data;
combine the tagged log and the hardware log to form the combined event log containing both OS event data and hardware event data in a uniform format;
store the combined event log to the RAC memory;
identify if the combined event log contains an event that requires notification to a management device;
in response to identifying that the combined event log contains an event requiring notification to a managing device:
generate a first event notification; and
transmit, via a network, the first event notification to the management device;
wherein the tagged log is generated by the processor executing second firmware, which configures the processor to:
retrieve an OS log and a mapping table from a system memory, the OS log containing at least one OS event and the mapping table containing at least one subsystem component event corresponding to the OS event;
map the at least one OS event from the OS log to the at least one subsystem component event based on the mapping table; and
generate the tagged log based on the at least one subsystem component event.
8. The information handling system of claim 7 , wherein the processor further:
stores the tagged log to the system memory; and
transmits the tagged log to the RAC.
9. The information handling system of claim 7 , wherein the mapping table further comprises at least one of:
an OS severity level;
a hardware severity level; and
an alert.
10. The information handling system of claim 7 , wherein the tagged log further comprises:
a first event message identifier;
a first event severity value; and
a first event source identifier.
11. The information handling system of claim 10 , wherein the first event message identifier is generated by concatenating a first value denoting a first component subsystem, a second value representing a first event source and a third value corresponding to an OS event identifier and the first event message identifier represents the uniform format for both the OS event data and hardware event data.
12. The information handling system of claim 7 , wherein combining the tagged log and the hardware log to form the combined event log further comprises the first firmware configuring the RAC to: append the tagged log to the hardware log in the order that the tagged log is received by the RAC.
13. An event logging system comprising:
a processor communicatively coupled to a system memory and which executes a second firmware, which configures the processor to:
retrieve an OS log and a mapping table from a system memory, the OS log containing at least one OS event and the mapping table containing at least one subsystem component event corresponding to the OS event;
map the at least one OS event from the OS log to the at least one subsystem component event based on the mapping table; and
generate the tagged log based on the at least one subsystem component event; and
a remote access controller (RAC) communicatively coupled to the processor and to a RAC memory device, the RAC including first firmware executing thereon to provide a combined event log, wherein the first firmware configures the RAC to:
receive a tagged log containing operating system (OS) event data;
retrieve from the RAC memory device, a hardware log containing hardware event data;
combine the tagged log and the hardware log to form the combined event log containing both OS event data and hardware event data in a uniform format;
store the combined event log to the RAC memory;
identify if the combined event log contains an event that requires notification to a management device; and
in response to identifying that the combined event log contains an event requiring notification to a managing device:
generate a first event notification; and
transmit, via a network, the first event notification to the management device.
14. The event logging system of claim 13 , wherein the processor:
stores the tagged log to the system memory; and
transmits the tagged log to the RAC.
15. The event logging system of claim 13 , wherein the mapping table further comprises at least one of:
an OS severity level;
a hardware severity level; and
an alert.
16. The event logging system of claim 13 , wherein the tagged log further comprises:
a first event message identifier;
a first event severity value; and
a first event source identifier.
17. The event logging system of claim 16 , wherein the first event message identifier is generated by concatenating a first value denoting a first component subsystem, a second value representing a first event source and a third value corresponding to an OS event identifier and the first event message identifier represents the uniform format for both the OS event data and hardware event data.