vRealize Log Insight as a Syslog Server

vRealize Log Insight includes a built-in syslog server that is constantly active when the vRealize Log Insight service is running.

The syslog server listens on ports 514/TCP, 1514/TCP, and 514/UDP, and is ready to ingest log messages that are sent from other hosts. Messages that are ingested by the syslog server become searchable in the vRealize Log Insight web user interface near real time. The maximum syslog message length that vRealize Log Insight accepts is 10 KB.

Syslog formats RFC-6587, RFC-5424, and RFC-3164 are supported.