Configuring ESXi 5.1u1 servers to forward the logs to SysLog server ?

Hi people,

Can anyone please suggest me what is the best way to configure all of my ESXi servers to forward all of the logs to a syslog server ?

Does VMware has their own SysLog server that can be utilized with no additional cost ?

The purpose is to capture all of the server logs before it gets rolled over for further diagnostic.
LVL 9
Senior IT System EngineerIT ProfessionalAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
VMware does supply a Syslog server on the vCenter Server installation media.

You can also purchase Log Insight see here

http://www.vmware.com/products/vrealize-log-insight

this has a graphical interface similar to Splunk.

As for configuring for a Syslog Server, you just change the Advanced Settings.

see here

VMware KB: Configuring syslog on ESXi 5.x
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Senior IT System EngineerIT ProfessionalAuthor Commented:
So in this case the data will be send over to my Windows VCenter server which will be saved in separate VMDK disk.

Is that possible or is there a u better alternative deployment ?
0
GG VPCommented:
Yes, you can save it in separate drive (VMDK), please refer to below picture and change the Drive source,

http://www.flickr.com/photos/31838982@N08/5967429123/

http://blogs.vmware.com/vsphere/2011/07/setting-up-the-esxi-syslog-collector.html
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Senior IT System EngineerIT ProfessionalAuthor Commented:
can I repoint it into a NAS device so the drive is mapped using CIFS share inside the VCenter ?
0
GG VPCommented:
Yes, you can!
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
You can use vCenter Server, and install the Syslog Server.

The syslog files just appear as very large text files.

If you require a GUI, I would recommend Log Insight, which is a separate appliance.

You can do different methods, you can use a Syslog Server, or you can change the location of the persistent logs to a datastore, either iSCSI or NFS.

You can then share this NFS export on your NAS, so you can inspect the logs.

This does not require a Syslog.
0
Senior IT System EngineerIT ProfessionalAuthor Commented:
ok, most probably I'm gonna use the free Syslog buildin feature from the VMware for my purpose.
0
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
It's not really built in, it's a separate installation, and not very advanced application, when it comes to Syslogs.

You will see, when you look through your syslogs, you'll get a lot of noise!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.