How to Forward VMware ESX Server Logs to SYSLOG Server

   Updated : October 24, 2017




How to Forward VMware ESX Server Logs to SYSLOG Server

By the following three simple steps, you can forward VMware ESX server logs to a remote logserver.

1. Enable SSH service on your ESXi 5 Server.

Login to your ESX server through vspher clinet Go to -> configuration -> Security Profile ->Services -> Properties (This will open a new window) -> in that Select SSH (Options)- Start ( More)

2. Enable Firewall for syslog.

In your vspher clinet ->configuration -> Security Profile -> Firewall -> Properties (This will open a new window)-> Check syslog (As shown below)

3. Point the remote log server

Log in to your Vmware ESXi using ssh and run the following commands.

#esxcli system syslog config get 
Default Rotation Size: 1024
Default Rotations: 8
Log Output: /scratch/log
Log To Unique Subdirectory: false
Remote Host:
#esxcli system syslog config set –loghost=’udp://ipof.remote.logserver:514′ 
(you can use TCP port also )
#esxcli system syslog reload 

Thats all. Now the logs will be forwarded to your remote logserver
Now you can stop the ssh service.