How Setup Syslog on Host ESXI

Prequsition action :

* Activate ssh on each host and do ssh access to each host

* Prepare for syslog server on this case syslog server with ip 192.168.1.220

KB install vsphere syslog collector :

https://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vsphere.install.doc_50%2FGUID-471EFE67-9035-473E-8217-6B67E493A518.html

On Each Host do this step as below :

  1. Before change any setting as below :
    ~ # esxcli system syslog config get
    Default Rotation Size: 1024
    Default Rotations: 8
    Log Output: /scratch/log
    Log To Unique Subdirectory: false
    Remote Host:
  2. esxcli system syslog config set –loghost=’udp://192.168.1.220:514′
  3. esxcli system syslog config set –logdir-unique true
  4. check configuration after change config as below :
    ~ # esxcli system syslog config get
    Default Rotation Size: 1024
    Default Rotations: 8
    Log Output: /scratch/log
    Log To Unique Subdirectory: true
    Remote Host: udp://192.168.1.220:514
  5. esxcli system syslog reload
  6. nc -z 192.168.1.220 514
    if work will show this –> Connection to 192.168.1.220 514 port [tcp/shell] succeeded!
  7. Testing initiate test syslog
    esxcli system syslog mark –message ” SYSLOG TESTING VMWARE `date` “
  8. Show configuration as below :
    esxcli system syslog config get
    Default Rotation Size: 1024
    Default Rotations: 8
    Log Output: /scratch/log
    Log To Unique Subdirectory: true
    Remote Host: tcp://192.168.1.220:514
  9. After do all task as above now to enable on firewall
    From esxi client console –> Host –> Configuration –> Security Profile –> Firewall –> Enable on syslog (port udp/tcp:514) just check on that settings.

Reference KB :

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2003322

Thanks

Purwandi

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s