Remote Syslog configuration

[timothycw]

I have been asked to send all ESXi Host logs to an internal syslog server at my company. After a little research it appears that this command will do it.

esxcli system syslog config set --loghost='udp://10.11.12.13:514'

Is there a way to send specific logs? I don't want to send all of the logs in /var/log if possible.

Also we are using VMwrae's  vCenter log Insight tool as well. This appears to be working properly. The ESXi host are 5.1 and 5.5

Thanks in advance for your help.

Tim

[AndreasBergman]

You might be able to exclude logs from syslog by changeing the settings in for example /etc/vmware/vpxa/vpxa.cfg

[Alistar]

The easier way to do it is via Configuration -> Advanced Settings -> Syslog -> Syslog.global.logHost value where you enter your udp:// address.

[mjha]

You can choose to include which logs should be sent to your Syslog server from Esxi host >Configuration> Advance Settings> Syslog and then nullifying the fields for which you don't want any logs.