Setting up logging to a syslog server

[rjsetford]

Hello,

I have a standalone syslog server (kiwi) that I'd like to log both my ESX 3.5 servers to.

Does anyone know of a guide that will hand-hold me through configuring each ESX host to point at the syslog server. Also, setting logging levels would be useful as well.

Thanks,

Rich

[gary1012]

Basic setup is done by adding @hostname to each applicable entry in /etc/syslog.conf. Example: authpriv.* @yourhostname OR mail.* @yourhostname. More elaborate configs can be performed but this will get you started. Review syslog.conf and you'll pick it up fast.

[Texiwill · Accepted solution]

Hello,

You can use this short how-to: http://www.tooms.dk/?page=http%3A//www.tooms.dk/forum/topic.asp%3FTOPIC_ID%3D127

Note however, that you generally want everything to go to your syslog server but if you are only concerned about one set of logging levels then you can as gary1012 stated, use instead of . the level.* approach. Also, I use IP addresses just in case DNS fails.

Best regards,

Edward L. Haletky

VMware Communities User Moderator

====

Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education. CIO Virtualization Blog: http://www.cio.com/blog/index/topic/168354

As well as the Virtualization Wiki at http://www.astroarch.com/wiki/index.php/Virtualization

[rjsetford]

Spot on Texiwill,

That sorted it.

Thanks,

Richard