Configure vCenter Server to Forward Log Events to VMware Aria Operations for Logs

The vSphere Integration collects task and events from vCenter Server, but not the low-level internal logs from each vCenter Server component. These logs are used by the vSphere Content Pack.

For vCenter Server 6.5 and later releases, the preferred way to use native integration from VMware Aria Operations for Logs and install a VMware Aria Operations for Logs agent on it. Alternatively, the configuration can be done through the vCenter Server Appliance Management Interface.

For more information about how to forward log events from vCenter Server, see the vSphere documentation about redirecting vCenter Server Appliance log files to another machine.

For earlier versions of vSphere, although the vCenter Server Appliance contains a syslog daemon that can be used to route logs, the preferred method is to install a VMware Aria Operations for Logs agent.

For information about installing VMware Aria Operations for Logs agents, see Working with VMware Aria Operations for Logs Agents.

The vSphere content pack contains agent groups defining specific log files to collect from vCenter Server installations. The configuration is visible at https://LogInsightServerFqdnOrIP/contentpack?contentPackId=com.vmware.vsphere.

For information about working with agent groups, see Centralized Agent Configurations and Agent Groups

For information about vCenter Server log file locations, see http://kb.vmware.com/kb/1021804 and http://kb.vmware.com/kb/1021806.