Configure VMware ESXi 5 event to send to SYSLOG server

In a large network, we need to manage O & M logs for various devices, such as routers, switches, firewalls, Windows/Linux servers, and databases, and understand the O & M status of the network.

A friend asked: Does VMware support syslogs? Of course, this is supported!

VMware ESXi 5 supports syslog forwarding by default. After logging on to the VMware vSphere Client (of course, the account you log on to must have the response permission, which is available by default as root), select the ESXi server to be configured, "configuration → software → advanced settings → syslog → global"



Under syslog, you can configure various log information, which is very detailed. Syslog. global. logHost is the place where the syslog server is set. Multiple syslog servers can be sent at the same time, separated by commas. It also supports multiple protocols, UDP and TCP, and SSL encrypted transmission to the syslog server. Of course, the default port of the syslog server is 514, and UDP is used. Here we write "192.168.1.119: 514", which uses UDP protocol to transmit to port 514 of 192.168.1.119.

The configuration takes effect immediately:

VcHLz + release + JnJkcXVvO9bQsum/release/Cw + release + LXEysK8/release + DQo8aW1nIGFsdD0 = "" class = "lightbox" src = "http://www.bkjia.com/uploads/allimg/131126/020AaN7-2.png"/>

However, in an enterprise, logs involve various devices. Therefore, it is a good solution to use syslog for unified O & M event management.

Author: Zhang baichuan (Network Ranger)
Website: http://www.youxia.org