ESXi doesn't send syslog messages to tcp syslog server

[SamAlekseev]

Hello

I have several esxi servers in cluster. ESXi's version is 6.0u2.

I'm trying to configure sending syslog messages and faced the situation when it works in case of using udp syslog server and port 514.

I'm havingrsyslog server.

tcp doesn't work.

On the syslog server I can see via tcpdump that client and server can't establish a connection but there is no reason.

At the same time other linux server can send syslog messages to tcp syslog server successfully.

I guess the problem is in the blocked port 514 for incoming connections at the esxi's side, but I'm not sure.

I didn't like the method of adding additional rules to esxi firewall, it is rather complicated.

does anybody faced the same problem?

[T180985 · Accepted solution]

are you sure you have opened the TCP port on your network firewall? I assume the hosts management addresses arent on the same subnet as your syslog server

[SamAlekseev]

On the syslog server I can see incoming packets from ESXi host.

10.9.0.219 - my esxi host.

[SamAlekseev]

the problem was is in the one direction ACL between networks