There are five configurable options:
Syslog.global.logDir
- Location on a local or remote datastore (VMFS, NFS, FAT) and path where logs should be saved to. Has the format[DatastoreName] DirectoryName
which maps to/vmfs/volumes/DatastoreName/DirectoryName/
. If the specifiedDirectoryName
does not exist, it will be created. If/scratch
is defined, the default is[]/scratch/log
. For more information on scratch, see Creating a persistent scratch location for ESXi (1033696).Syslog.global.logHost
- Comma-delimited list of remote servers where logs are sent using the syslog protocol. If thelogHost
field is blank, no logs are forwarded. Include the protocol and port, similar totcp://hostname:514
orudp://hostname:514
orssl://hostname:514
.Syslog.global.logDirUnique
- A boolean option which controls whether a host-specific directory is created within the configuredlogDir
. The directory name is the hostname of the ESXi host. A unique directory is useful if the same shared directory is used by multiple ESXi hosts. Defaults tofalse
.Syslog.global.defaultRotate
- The maximum number of log files to keep locally on the ESXi host in the configured logDir. Does not affect remote syslog server retention. Defaults to8
.Syslog.global.defaultSize
- The maximum size, in kilobytes, of each local log file before it is rotated. Does not affect remote syslog server retention. Defaults to1024 KB
. For more information on sizing, see Providing Sufficient Space for System Logging.
Note: To individually set the logging level for system components such as auth, vmkernel, hostd etc., you may select the loggersunder syslog from vSphere client GUI and set to desired value.
Configuring Local and Remote Logging using the esxcli
command
Local and Remote syslog functionality can be configured for a host using the
esxcli
command line utility, which can be used at the console of an ESXi host, in the vCLI, or in the vMA.
For more information regarding the use of
esxcli
, see the vSphere Command-Line Interface Documentation.- Open a ESXi Shell console session where the
esxcli
command is available, such as the vCLI or on the ESXi host directly. - Display the existing five configuration options on the host by running this command:
esxcli system syslog config get
- Set new host configuration, specifying options to change, by running a command:
Caution: Entering incorrect information for the logging path can cause the destination system to become unmanageable.esxcli system syslog config set --logdir=/path/to/vmfs/directory/ --loghost=RemoteHostname --logdir-unique=true|false --default-rotate=NNN --default-size=NNN
For example:
To configure remote syslog using TCP on port 514:esxcli system syslog config set --loghost='tcp://10.11.12.13:514'
Note: When using Syslog with UDP on ESXi 5.0, you must download and install the patch VMware ESXi 5.0, Patch ESXi-5.0.0-20120704001-standard (2019113). - After making configuration changes, load the new configuration by running this command:
esxcli system syslog reload
- Run this command to test if the port is reachable from the ESXi host:
nc -z RemoteHostname 514
For example:nc -z 10.11.12.13 514
Configuring Local and Remote logging using Host Profiles
Local and Remote syslog functionality can be configured for a cluster of similar hosts using Host Profiles. For more information, see the Set Up Syslog from the Host Profiles Interface section of the vSphere Installation and Setup Guide.- Connect to vCenter Server using the vSphere Client.
- Click Home.
- Under the Management section, click Host Profiles.
- Create a new profile or edit an existing profile.
- In the Edit Profile dialog, set one or more of the five configuration options.
- If you configured syslog using
esxcli
or advanced configuration options and captured this as a reference host, the 5 configuration options are already visible under the Advanced Configuration option section. - If syslog has not been previously configured, right-click the Advanced Configuration options section and add a profile for each of the five configuration options.
- If you configured syslog using
- Save the profile and assign it to hosts.
Configuring Local and Remote logging using Host Profiles using vSphere Web Client
- Connect to vCenter Server using vSphere Web Client.
- Click Home.
- Under Operations and Policies section, click Host Profiles.
- Create a new profile or edit an existing profile.
- In the Edit Profile dialog, set one or more of the five configuration options.
- Save the profile and assign it hosts.
For more information on configuring syslog using vSphere Web Client without host profile, see the Configure Syslog on ESXi Hosts section in vSphere 6.0 Documentation.
Configuring Local and Remote Logging using Advanced Configuration options
Local and Remote syslog functionality can be configured for a host using advanced configuration options, which can be set using the vSphere Client, vSphere Web Client, PowerCLI, or vCLI.
For more information, see the Configure Syslog on ESXi Hosts section of the vSphere Single Host Management Guide.
This configuration cannot be performed using the local console's
esxcfg-advcfg
command. For more information on setting advanced configuration options using each method, see Configuring advanced options for ESXi/ESX (1038578).
Note: If the ESXi host loses communication with the remote syslog server, logging Logging stops being pushed to the syslog server. You see the "
failed to write log
" error in the /var/log/.vmsyslogd.err
file. Nothing is sent to the remote syslog server until the syslogd
service is restarted.Related Information
Configuring ESXi Firewall Exception using the esxcli
command
Note: You may need to manually open the Firewall rule set for syslog when redirecting logs. For UDP traffic, this firewall rule has no effect in ESXi 5.0 build 456551 and the UDP port 514 traffic flows regardless.
To open outbound traffic through the ESXi Firewall on UDP port 514 and TCP ports 514 and 1514, run these commands:
To open outbound traffic through the ESXi Firewall on UDP port 514 and TCP ports 514 and 1514, run these commands:
esxcli network firewall ruleset set --ruleset-id=syslog --enabled=true
esxcli network firewall refresh
Restarting the Management agents in ESXi
Enabling syslog on ESXi 3.5 and 4.x
Location of ESXi 3.5-4.1 log files
Creating a persistent scratch location for ESXi 4.x/5.x/6.x
Configuring advanced options for ESXi/ESX
Installing the HA Agent fails on all hosts, except one
ESXi 上での syslog の構成
VMware ESXi 5.0, Patch ESXi-5.0.0-20120704001-standard
Location of ESXi 5.1 and 5.5 log files
Configurando syslog no ESXi
ホストを再起動すると ESXi の syslog が NFS データストアに保存されなくなる
Configurar syslog en ESXi
在 ESXi 上配置 syslog
Konfigurieren von syslog in ESXi 5.x und 6.0
Update History
03/18/2013 - Added an example to configure UDP with the esxcli command and a link to the patch for 5.0
11/19/2014 - Added step 5 under "Configuring Local and Remote Logging using the esxcli command" of the Resolution section
03/12/2015 - Added product VMware ESXi 6.0.x.
11/19/2014 - Added step 5 under "Configuring Local and Remote Logging using the esxcli command" of the Resolution section
03/12/2015 - Added product VMware ESXi 6.0.x.
No comments:
Post a Comment