Configuring the vCenter Server to Forward Log Events to VMware Aria Operations for Logs (SaaS)

The vSphere integration collects task and events from vCenter Server, but not the low-level internal logs from each vCenter Server component. These logs are used by the vSphere content pack.

The configuration for vCenter Server 6.5 and later releases is done through the vCenter Server Appliance Management Interface. For more information about how to forward log events from vCenter Server, see the vSphere documentation about redirecting vCenter Server Appliance log files to another machine.

For earlier versions of vSphere, although the vCenter Server Appliance contains a syslog daemon that can be used to route logs, the preferred method is to install a VMware Aria Operations for Logs Agent.

For information about installing a VMware Aria Operations for Logs Agent, see Working with VMware Aria Operations for Logs Agents.

The vSphere content pack contains agent groups defining specific log files to collect from vCenter Server installations.

For information about vCenter Server log file locations, see http://kb.vmware.com/kb/1021804 and http://kb.vmware.com/kb/1021806.