Configuring ESXi 5.1u1 servers to forward the logs to SysLog server ?

Hi people,

Can anyone please suggest me what is the best way to configure all of my ESXi servers to forward all of the logs to a syslog server ?

Does VMware has their own SysLog server that can be utilized with no additional cost ?

The purpose is to capture all of the server logs before it gets rolled over for further diagnostic.
LVL 11
Senior IT System EngineerSenior Systems EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
VMware does supply a Syslog server on the vCenter Server installation media.

You can also purchase Log Insight see here

http://www.vmware.com/products/vrealize-log-insight

this has a graphical interface similar to Splunk.

As for configuring for a Syslog Server, you just change the Advanced Settings.

see here

VMware KB: Configuring syslog on ESXi 5.x

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Senior IT System EngineerSenior Systems EngineerAuthor Commented:
So in this case the data will be send over to my Windows VCenter server which will be saved in separate VMDK disk.

Is that possible or is there a u better alternative deployment ?
GG VPCommented:
Yes, you can save it in separate drive (VMDK), please refer to below picture and change the Drive source,

http://www.flickr.com/photos/31838982@N08/5967429123/

http://blogs.vmware.com/vsphere/2011/07/setting-up-the-esxi-syslog-collector.html
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

Senior IT System EngineerSenior Systems EngineerAuthor Commented:
can I repoint it into a NAS device so the drive is mapped using CIFS share inside the VCenter ?
GG VPCommented:
Yes, you can!
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
You can use vCenter Server, and install the Syslog Server.

The syslog files just appear as very large text files.

If you require a GUI, I would recommend Log Insight, which is a separate appliance.

You can do different methods, you can use a Syslog Server, or you can change the location of the persistent logs to a datastore, either iSCSI or NFS.

You can then share this NFS export on your NAS, so you can inspect the logs.

This does not require a Syslog.
Senior IT System EngineerSenior Systems EngineerAuthor Commented:
ok, most probably I'm gonna use the free Syslog buildin feature from the VMware for my purpose.
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
It's not really built in, it's a separate installation, and not very advanced application, when it comes to Syslogs.

You will see, when you look through your syslogs, you'll get a lot of noise!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.