NSX-T syslog output file names

[AlbertColl]

Hi, fi

I have an NSX-T Manager cluster running V2.5.4, with several loggings enabled to a syslog server.

Is there any way to specify the output file names in the syslog server?

I guess that this is not possible since the "set logging-server" command does not include such option:

set logging-server <hostname-or-ip-address[:port]> proto <proto> level <level> [facility <facility>] [messageid <messageid>] [serverca <filename>] [clientca <filename>] [certificate <filename>] [key <filename>] [structured-data <structured-data>]

The reason of this question is that the syslog server administrator is deploying a backup solution and he would like to get the syslog files created under some specific names to ease his backup automation tasks.

[Alex_Romeo · Accepted solution]

Hi,

all you can do with the logs, you can see it from page 644 of the attached file.

ARomeo

[mauricioamorim]

Inside NSX components the log files have their names as explained in the documentation and this is something that cannot be changed. This, although, should not be a problem, as local syslog is not to be used at scale.

Best practice is to send syslog to a server where it can be parsed and acted upon, with dashboards and other means of treating these messages in a central manner. Syslog messages sent by NSX-T conform to RFCs and the receiving server may do whatever it needs with it. Syslog messages are not files with names. They are syslog messages that are received by a server and stored. There is nothing that any syslog sender can do regarding file names on a remote syslog server.