You can forward the vCenter Server Appliance log files to a remote syslog server to conduct an analysis of your logs.
ESXi can be configured to send log files to a vCenter Server rather than storing them to a local disk. The recommended maximum numbers of supported hosts to collect logs from is 30. See http://kb.vmware.com/s/article/2003322 for information on how to configure ESXi log forwarding. This feature is intended for smaller environments with stateless ESXi hosts. For all other cases, use a dedicated log server. Using vCenter Server to receive ESXi log files might impact vCenter Server performance.
Log in to the vCenter Server Appliance Management Interface as root.
- In the vCenter Server Appliance Management Interface, select Syslog.
- In the Forwarding Configuration section, click Configure if you have not configured any remote syslog hosts. Click Edit if you already have configured hosts.
- In the Create Forwarding Configuration pane, enter the server address of the destination host. The maximum number of supported destination hosts is three.
- From the Protocol drop-down menu, select the protocol to use.
Transport Layer Security
Transmission Control Protocol
Reliable Event Logging Protocol
User Datagram Protocol
- In the Port text box, enter the port number to use for communication with the destination host.
- In the Create Forwarding Configuration pane, click Add to enter another remote syslog server.
- Click Save.
- Verify that the remote syslog server is receiving messages.
- In the Forwarding Configuration section, click Send Test Message.
- Verify on the remote syslog server that the test message was received.
The new configuration settings are shown in the Forwarding Configuration section.