Solved

Configuring ESXi 5.1u1 servers to forward the logs to SysLog server ?

Posted on 2014-10-27
8
474 Views
Last Modified: 2014-11-04
Hi people,

Can anyone please suggest me what is the best way to configure all of my ESXi servers to forward all of the logs to a syslog server ?

Does VMware has their own SysLog server that can be utilized with no additional cost ?

The purpose is to capture all of the server logs before it gets rolled over for further diagnostic.
0
Comment
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
8 Comments
 
LVL 120

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE^2) earned 333 total points
ID: 40405805
VMware does supply a Syslog server on the vCenter Server installation media.

You can also purchase Log Insight see here

http://www.vmware.com/products/vrealize-log-insight

this has a graphical interface similar to Splunk.

As for configuring for a Syslog Server, you just change the Advanced Settings.

see here

VMware KB: Configuring syslog on ESXi 5.x
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 40405864
So in this case the data will be send over to my Windows VCenter server which will be saved in separate VMDK disk.

Is that possible or is there a u better alternative deployment ?
0
 
LVL 5

Assisted Solution

by:GG VP
GG VP earned 167 total points
ID: 40405890
Yes, you can save it in separate drive (VMDK), please refer to below picture and change the Drive source,

http://www.flickr.com/photos/31838982@N08/5967429123/

http://blogs.vmware.com/vsphere/2011/07/setting-up-the-esxi-syslog-collector.html
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 40405891
can I repoint it into a NAS device so the drive is mapped using CIFS share inside the VCenter ?
0
 
LVL 5

Expert Comment

by:GG VP
ID: 40405898
Yes, you can!
0
 
LVL 120

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE^2)
Andrew Hancock (VMware vExpert / EE MVE^2) earned 333 total points
ID: 40405907
You can use vCenter Server, and install the Syslog Server.

The syslog files just appear as very large text files.

If you require a GUI, I would recommend Log Insight, which is a separate appliance.

You can do different methods, you can use a Syslog Server, or you can change the location of the persistent logs to a datastore, either iSCSI or NFS.

You can then share this NFS export on your NAS, so you can inspect the logs.

This does not require a Syslog.
0
 
LVL 8

Author Comment

by:Senior IT System Engineer
ID: 40406047
ok, most probably I'm gonna use the free Syslog buildin feature from the VMware for my purpose.
0
 
LVL 120
ID: 40406056
It's not really built in, it's a separate installation, and not very advanced application, when it comes to Syslogs.

You will see, when you look through your syslogs, you'll get a lot of noise!
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Setting Permissions within vCenter 3 73
Resetting the VMWARE vCenter virtual Appliance 6.0 3 41
VCSA and External PSC for linked mode ? 6 32
veeam restore 10 76
If we need to check who deleted a Virtual Machine from our vCenter. Looking this task in logs can be painful and spend lot of time, so the best way to check this is in the vCenter DB. Just connect to vCenter DB(default DB should be VCDB and using…
Giving access to ESXi shell console is always an issue for IT departments to other Teams, or Projects. We need to find a way so that teams can use ESXTOP for their POCs, or tests without giving them the access to ESXi host shell console with a root …
Teach the user how to use vSphere Update Manager to update the VMware Tools and virtual machine hardware version Open vSphere Client: Review manual processes for updating VMware Tools and virtual hardware versions: Create a new baseline group in vSp…
Advanced tutorial on how to run the esxtop command to capture a batch file in csv format in order to export the file and use it for performance analysis. He demonstrates how to download the file using a vSphere web client (or vSphere client) and exp…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question