securely forward vRealize Operations logs to a syslog server

[JosePerez99]

Hello everyone, I need your help to solve a problem

I need to forward logs to an external server from vROps, the problem is that I can't understand which port or which protocol I have to use to be able to do it, when sending these logs I need them to be sent securely (SSL) could someone guide me on this please?

I attach a screenshot of the 2 protocols that appear to me and the ports.

Thank you very much in advance for everything.

[Shen88 · Accepted solution]

@JosePerez99,

Please refer this log forwarding URL where it clearly outlines that either using CFAPI with 9543 or Syslog with 6541 ensures the data is sent securely. In terms of choosing between these 2 protocols be are that syslog uses UDP, TCP, TCP+SSL, whereas CFAPI is the VMware Aria Operations for Logs native ingestion protocol over HTTP or HTTPS.

Also, below comparision might help.

• CFAPI — Events are sent in their original format to VMware Aria Operations for Logs using cfapi. Events sent over cfapi do not have to follow the guidelines of a syslog event and are not modified to comply with the syslog RFC.

• Syslog — VMware Aria Operations for Logs can ingest data from any source via syslog. Just set the VMware Aria Operations for Logs server as your syslog destination.