vROPS 6.6.1 - Anyway of changing syslog to UDP?

[sandsfootgroup]

Hello

We have recently upgraded to vROPS 6.6.1.  We have an external syslog system across our entire estate that is configured to use port 514 UDP.

When configuring vROPS to forward syslog, we reference this article Configuring the external syslog server in vRealize Operations Manager 6.x (2144033) VMware Knowledge Base

However, at the bottom of the article it states:

• For vRealize Operations Manager 6.0, Analytics, Collector, Web, SuiteAPI and Audit logs use UDP connection for log configuration.
• For vRealize Operation Manager 6.0.1 or later versions, Analytics, Collector, Web, SuiteAPI use TCP connection and Audit logs use UDP connection for log configuration.

Questions:

1. Why did this change?
2. Can you change 6.6.1 to use UDP?

Thanks

[daphnissov]

You're better off using the Log Insight agent built into the vROps appliance as you can select which port and protocol to use to send logs. Using the Content Pack for vROps will give you the filters and parsers necessary to grab all log files, otherwise you can declare them yourself. The config file is at /etc/liagent.ini.

[sandsfootgroup]

Hello

I've been looking at this further and cannot see how to do this?  Are there any articles to follow?

I've found this: Log Forwarding

But this is for 6.7 and I cannot see Administration > Management > Log Forwarding in the 6.6.1 UI.

Thanks again

[daphnissov]

You can use this document as a basis. Note that you do not need to create liagent.ini as it already exists at /etc. Edit the file appropriately as mentioned.