Best practice rsyslog on vsphere 6?

[os_it_io]

hello, tried to configure a rsyslog solution for my vmware environment.

actually i do have a vcenter (windows), a RHEL 6 (central rsyslog server since years) and a Centos 7 (Graylog).

Last week the filesystem ran out of space, because vsphere logging is too chatti.

first of all i was searching how to decrease the loglevel to warning. But i found no solution.

what is your prevered way?

am i able to set up syslog collector on vmware vcenter and push this to graylog?

What do you prever?

[LucianoPatrão]

Hi,

First how to change log level:

https://kb.vmware.com/kb/1004795

Same options how to forward the logs

http://www.virtuallyghetto.com/2012/08/forwarding-vcenter-server-logs-to.html

Hope this helps

[os_it_io]

I am aware of both.

Isn´t it possible to change loglevel via hostprofile? I do not want to change every single ESX Host via cmd or config file.

second link!!!!

Windows vCenter Server Syslog Configuration

Disclaimer: This is not supported by VMware, please use at your own risk.

I  do not understand. Just want to collect logfiles and send to graylog.

second part, change log level.

Is there really a "hack" needed?

[os_it_io]

Nobody?

[LucianoPatrão]

Hi,

If you add in your host profile the syslog location, then yes you can apply to all hosts that.

Is that what you are looking for??