If you manually modified the existing entries or logs sections and then modify the log forwarding settings from vRealize Operations Manager, you lose the changes that you made.
The following server entries are overwritten by the vRealize Operations Manager log forwarding settings.
port proto hostname ssl reconnect ssl_ca_path
The following [common | global] tags are being added or overwritten by the vRealize Operations Manager log forwarding settings.
vmw_vr_ops_appname vmw_vr_ops_clustername vmw_vr_ops_clusterrole vmw_vr_ops_hostname vmw_vr_ops_nodename
vmw_vr_ops_clusterroletag. You can either manually modify or ignore it.