VMware Cloud Community
eric_krejci
Enthusiast
Enthusiast
Jump to solution

ESXi hosts not logging anymore after a restart of the LogInsight service

Hello,

I've set several ESXi (5.1 U1) to use the freshly installed LogInsight. they did sent their event correctly to it. I had to restart the Log Insight service. after the restart, the hosts stopped to send events. the vcenter continued though.

I had to reload the syslog on the hosts to make them send their event to the Log Insight.

esxcli system syslog reload

any idea? I guess this is not a normal behaviour

thank you

Eric

Reply
0 Kudos
1 Solution

Accepted Solutions
sflanders
Commander
Commander
Jump to solution

Hey Eric, this unfortunately is expected behavior. What you are experiencing is a bug in ESXi. More information is available in the Install/Admin Guide under the Troubleshooting Log Insight section or at the following KB article: http://kb.vmware.com/kb/2003127.

ESXi Logs Stop Arriving in Log Insight

After restarting the Log Insight service, syslog messages from ESXi hosts stop arriving in Log Insight.

Problem

Configuration changes in Log Insight require that you restart the Log Insight service. After the restart, syslog feeds from ESXi are no longer available.

Cause

Certain versions of ESXi stop sending logs if the connectivity to the remote syslog listener is interrupted, even briefly. This problem affects the following ESXi versions, depending on the communication protocol that is used.

Hope this helps! === If you find this information useful, please award points for "correct" or "helpful". ===

View solution in original post

Reply
0 Kudos
2 Replies
sflanders
Commander
Commander
Jump to solution

Hey Eric, this unfortunately is expected behavior. What you are experiencing is a bug in ESXi. More information is available in the Install/Admin Guide under the Troubleshooting Log Insight section or at the following KB article: http://kb.vmware.com/kb/2003127.

ESXi Logs Stop Arriving in Log Insight

After restarting the Log Insight service, syslog messages from ESXi hosts stop arriving in Log Insight.

Problem

Configuration changes in Log Insight require that you restart the Log Insight service. After the restart, syslog feeds from ESXi are no longer available.

Cause

Certain versions of ESXi stop sending logs if the connectivity to the remote syslog listener is interrupted, even briefly. This problem affects the following ESXi versions, depending on the communication protocol that is used.

Hope this helps! === If you find this information useful, please award points for "correct" or "helpful". ===
Reply
0 Kudos
eric_krejci
Enthusiast
Enthusiast
Jump to solution

Hi,

thank you for the update.

too bad. I'll check future release notes to see when this bug will be corrected.

thank you for your answer.

sincerely

Eric

Reply
0 Kudos