ESXi hosts or vCenter Server Appliance instances generate unstructured log data that can be analyzed in VMware Aria Operations for Logs.
A VMware Aria Operations for Logs cluster can use an integrated load balancer to distribute ESXi and vCenter Server Appliance syslog feeds between the individual nodes of the cluster.
For information on filtering syslog messages on ESXi hosts before messages are sent to VMware Aria Operations for Logs, see the Configure Log Filtering on ESXi Hosts topic in the Setting Up ESXi section, of the vSphere Installation and Setup guide.
For information on configuring syslog feeds from a vCenter Server Appliance, see Configure vCenter Server to Forward Log Events to VMware Aria Operations for Logs.
Prerequisites
- Verify that the vCenter Server that manages the ESXi host is registered with your VMware Aria Operations for Logs instance. Or, you can register the ESXi host and configure vCenter Server in a single operation.
- Verify that you have user credentials with enough privileges to configure syslog on ESXi hosts.
Note: You must configure the permission on the top-level folder within the vCenter Server inventory, and verify that the Propagate to children check box is selected.
Procedure
What to do next
The ESXi host configurations are shown in the ESXi hosts configured column of the vCenter Server table. If the hosts are configured, you can click View details in the hosts configured column to view detailed information for the configured ESXi hosts.