System logs are stored on non-persistent storage (2032823) | VMware KB
----
To verify the location:
----
BUT the server is Under production; restart it or move VM is not possible; then it's not possible to reboot the ESXi server.
How to do the same change without reboot ?
Regards
BUT the server is Under production; restart it or move VM is not possible; then it's not possible to reboot the ESXi server.
How to do the same change without reboot ?
At first, if you can't restart or move VMs to other ESXi hosts, you have the wrong setup...
What about updates due to critical vulnerabilities? What if you need to replace hardware, for example because a memory dimm is broken? So either you have multiple hosts in a cluster and a license which allows vMotion or it must be possible to shut down the VMs for maintenance windows. If neither is possible, the infrastructure design is not right.
But back to your question:
You can try to change the advanced option "Syslog.global.logDir" and restart the syslog service on command line:
esxcli system syslog reload
But I can't say for sure if that's enough.
A reboot is not required here. Changes to the syslog options take effect immediately. Please get this updated.
The KB feedback has been provided. Should be updated in few days.
Regards,
AJ
I understand a restart of the syslog service is not supposed to be required for the settings to apply, but my experience is different from the documentation (such as Configure Syslog on ESXi Hosts )
Even on the current build of ESXi 6.5 (14320405), updating the syslog IP, for example, required a restart of the syslog service. We deployed a new syslog server and after changing the IP for Syslog.global.LogHost, logs were still going to the old IP. As soon as we bounced the syslog service, logs started going to the correct IP.
FWIW, we did this through PowerCLI since we were updating entire clusters.
Hi
You don't really need to restart the ESXi host for such a these configs like Syslog Settings.
Just restart the syslog service of your host by vSphere Client / Web Client or run following commands by SSH/Shell access to do that:
For checking syslog current configs: # esxcli system syslog config get
For reloading syslog configuration: # esxcli system syslog config reload
Then check the new directory for new generated log files ...