How to Forward VMware ESX Server Logs to SYSLOG Server
By the following three simple steps, you can forward VMware ESX server logs to a remote logserver.
1. Enable SSH service on your ESXi 5 Server.
Login to your ESX server through vspher clinet Go to -> configuration -> Security Profile ->Services -> Properties (This will open a new window) -> in that Select SSH (Options)- Start ( More)
2. Enable Firewall for syslog.
In your vspher clinet ->configuration -> Security Profile -> Firewall -> Properties (This will open a new window)-> Check syslog (As shown below)
3. Point the remote log server
Log in to your Vmware ESXi using ssh and run the following commands.
#esxcli system syslog config get
Default Rotation Size: 1024
Default Rotations: 8
Log Output: /scratch/log
Log To Unique Subdirectory: false
Remote Host:
#esxcli system syslog config set –loghost=’udp://ipof.remote.logserver:514′
(you can use TCP port also )
#esxcli system syslog reload
Thats all. Now the logs will be forwarded to your remote logserver
Now you can stop the ssh service.