How to Forward VMware ESX Server Logs to SYSLOG Server




How to Forward VMware ESX Server Logs to SYSLOG Server

By the following three simple steps, you can forward VMware ESX server logs to a remote logserver.

1. Enable SSH service on your ESXi 5 Server.

Login to your ESX server through vspher clinet Go to -> configuration -> Security Profile ->Services -> Properties (This will open a new window) -> in that Select SSH (Options)- Start ( More)

2. Enable Firewall for syslog.

In your vspher clinet ->configuration -> Security Profile -> Firewall -> Properties (This will open a new window)-> Check syslog (As shown below)

3. Point the remote log server

Log in to your Vmware ESXi using ssh and run the following commands.

#esxcli system syslog config get 
Default Rotation Size: 1024
Default Rotations: 8
Log Output: /scratch/log
Log To Unique Subdirectory: false
Remote Host:
#esxcli system syslog config set –loghost=’udp://ipof.remote.logserver:514′ 
(you can use TCP port also )
#esxcli system syslog reload 

Thats all. Now the logs will be forwarded to your remote logserver
Now you can stop the ssh service.