Hi, fi
I have an NSX-T Manager cluster running V2.5.4, with several loggings enabled to a syslog server.
Is there any way to specify the output file names in the syslog server?
I guess that this is not possible since the "set logging-server" command does not include such option:
set logging-server <hostname-or-ip-address[:port]> proto <proto> level <level> [facility <facility>] [messageid <messageid>] [serverca <filename>] [clientca <filename>] [certificate <filename>] [key <filename>] [structured-data <structured-data>]
The reason of this question is that the syslog server administrator is deploying a backup solution and he would like to get the syslog files created under some specific names to ease his backup automation tasks.
Hi,
all you can do with the logs, you can see it from page 644 of the attached file.
ARomeo
Inside NSX components the log files have their names as explained in the documentation and this is something that cannot be changed. This, although, should not be a problem, as local syslog is not to be used at scale.
Best practice is to send syslog to a server where it can be parsed and acted upon, with dashboards and other means of treating these messages in a central manner. Syslog messages sent by NSX-T conform to RFCs and the receiving server may do whatever it needs with it. Syslog messages are not files with names. They are syslog messages that are received by a server and stored. There is nothing that any syslog sender can do regarding file names on a remote syslog server.