What are the recommendations for Syslog.global.logDir on ESXi 7 and ESXi 8?

[dbutch1976]

Hi all,

I have several hosts booting from USB or SD cards and I am trying to take all the steps possible to reduce the risk of them failing. With this in mind I have moved the scratch partition to a shared disk. I also have configured a centralized syslog server, however, my Syslog.global.logDir settings are all still set to the default of [] /scratch/log .

My question is, if I am forwarding all my events to a centralized syslog server is this setting used at all? Is syslog information being written to the local usb/sd disk and should this also be moved to a shared disk or is this not necessary if I have already moved the scratch partition?

[d3m1g0d]

You can set both Syslog.global.logHost and Syslog.global.logDir -- the logs will be then forwarded to the log server and will be also written to the log directory specified. Both locations will have the same information.

If Syslog.global.logDir is empty or points to a scratch partition, you must configure the scratch partition to a location on a persistent storage.