ESXi 5 Syslog

[JimKnopf99]

Hi,

i have configured syslog to use a remote kiwi syslog host. Is it possible with the esxi 5 to configure the remotehost only for errors and warnings?

I know that it is possible with esx (without i).

Is that implemented in the esxi 5 too?

Thanks

Frank

[Sreejesh_D]

by default syslog logging is enabled for vpxa and hostd in ESXi5. there are configurable tag available in hostd and vpxa config files to change the log level. Could'nt find a doc with details on log levels, i assume "warning" is the level for logging only errors and warnings.

/etc/vmware/vpxa/vpxa.cfg

/etc/vmware/hostd/config.xml

the following KBs have details on configuring syslog

http://kb.vmware.com/kb/2003322

http://kb.vmware.com/kb/1017658

[jose_maria_gonz]

Hi yezdi,

What about using vMA?

I did not try with ESXi but with ESX i was able to configure the logs I wanted to.

Looking forward to hearing from you

I hope I have helped you out

My Company: http://www.jmgvirtualconsulting.com

My Blog: http://www.josemariagonzalez.es

My Web TV show: http://www.virtualizacion.tv

My linkedin: http://es.linkedin.com/in/jmgvirtualconsulting

My Twitter: http://twitter.com/jose_m_gonzalez

[caustic386]

Ironically, I just logged on to post the same question.  I have set vCenter (Virtual Appliance) and all 3 of my hosts to "error" and "Warning", but no matter what the hosts continue to send Info and Notification level messages, even after restarting vpxa service. 

We use Veeam to replicate critical VMs every 5 minutes, and this generates about 3000 messages per hour of unnecessary notifications and information-level logs.    I checked the config files via SSH, and they do reflect my changes according to the KB articles by my server continues to receive unwanted logs. 

Is there something we're missing?

[peetz · Accepted solution]

Please note that http://kb.vmware.com/kb/1017658 does not apply to ESXi 5.0.

To configure the logging level on ESXi 5.0 use the host's advanced settings dialog in the vSphere client and change the entries Config.HostAgent.log.level and Vpx.Vpxa.config.log.level.

- Andreas

[JimKnopf99]

Hi,

thanks, i guess thats what i am looking for.

Here is a KB article i found.

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=100479...

Frank

[caustic386]

Did you have luck with that?  I'm still receiving numerous Local7.Info and Local7.Notify messages, even after setting the level to Warning or Error.

Maybe ESXi has an odd priority mechanism?

[java_cat33]

Did you find a fix for this? I have the same issue. By setting the vpxa logging level to none fixes it (leaving it set to warning makes no difference).

[JimKnopf99]

No, not yet. I am still searching.

And I'm beginning from scratch the second, third, fourth time........

Am 12.11.2012 um 22:59 schrieb java_cat33 <communities-emailer@vmware.com<mailto:communities-emailer@vmware.com>>:

VMware Communities<http://communities.vmware.com/index.jspa>

ESXi 5 Syslog

reply from java_cat33<http://communities.vmware.com/people/java_cat33> in VMware ESXi 5 - View the full discussion<http://communities.vmware.com/message/2146147#2146147