Wednesday, January 5, 2011

Log files using Syslog

Centralization of log files using Syslog requires UDP port 514 to be open between the ESX(i) host & the Syslog server. Open a Syslog port in the ESX firewall with the following command:
esxcfg-firewall -o 514,udp,out,"syslog". Syslog is configured on ESX in /etc/syslog.conf

There's no firewall in ESXi.

Splunk is a popular Syslog server solution. Also look at Simon Long's use of vMA for Syslog http://bit.ly/bds96h
More vQuotes

No comments:

Post a Comment