You can run a syslog agent such as rsyslog or syslog-ng in a container to send logs from NCP and related components to a syslog server.
The following methods are recommended. For more information about logging in Kubernetes, see https://kubernetes.io/docs/concepts/cluster-administration/logging.
Create a sidecar container that runs in the NCP or the nsx-node-agent pod.
Run a DaemonSet replica on every node.
With the sidecar container method, NSX CNI plug-in logs cannot be sent to the syslog server because the plug-in does not run in a pod.