• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 487
  • Last Modified:

Configuring ESXi 5.1u1 servers to forward the logs to SysLog server ?

Hi people,

Can anyone please suggest me what is the best way to configure all of my ESXi servers to forward all of the logs to a syslog server ?

Does VMware has their own SysLog server that can be utilized with no additional cost ?

The purpose is to capture all of the server logs before it gets rolled over for further diagnostic.
0
Senior IT System Engineer
Asked:
Senior IT System Engineer
  • 3
  • 3
  • 2
3 Solutions
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
VMware does supply a Syslog server on the vCenter Server installation media.

You can also purchase Log Insight see here

http://www.vmware.com/products/vrealize-log-insight

this has a graphical interface similar to Splunk.

As for configuring for a Syslog Server, you just change the Advanced Settings.

see here

VMware KB: Configuring syslog on ESXi 5.x
0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
So in this case the data will be send over to my Windows VCenter server which will be saved in separate VMDK disk.

Is that possible or is there a u better alternative deployment ?
0
 
GG VPCommented:
Yes, you can save it in separate drive (VMDK), please refer to below picture and change the Drive source,

http://www.flickr.com/photos/31838982@N08/5967429123/

http://blogs.vmware.com/vsphere/2011/07/setting-up-the-esxi-syslog-collector.html
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
Senior IT System EngineerIT ProfessionalAuthor Commented:
can I repoint it into a NAS device so the drive is mapped using CIFS share inside the VCenter ?
0
 
GG VPCommented:
Yes, you can!
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
You can use vCenter Server, and install the Syslog Server.

The syslog files just appear as very large text files.

If you require a GUI, I would recommend Log Insight, which is a separate appliance.

You can do different methods, you can use a Syslog Server, or you can change the location of the persistent logs to a datastore, either iSCSI or NFS.

You can then share this NFS export on your NAS, so you can inspect the logs.

This does not require a Syslog.
0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
ok, most probably I'm gonna use the free Syslog buildin feature from the VMware for my purpose.
0
 
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
It's not really built in, it's a separate installation, and not very advanced application, when it comes to Syslogs.

You will see, when you look through your syslogs, you'll get a lot of noise!
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now