Comments on: HowTo – VMware ESX 3.5 and remote syslog configuration

By: Tom

Tom — Thu, 12 Mar 2009 22:43:29 +0000

Hi Simon,

I’m currently using Orion for syslogging duties since it is already in house. I have used the free version of Splunk to look for stuff in IIS logs. It was really easy to setup and use.

-tom

By: Simon

Simon — Thu, 12 Mar 2009 22:17:55 +0000

Hi Tom -

Thanks for the tips. I used your directions to help people who want to not only capture this data but actually use it in a Splunk wiki entry: http://www.splunk.com/base/Community:VMwareESXSyslog

Not sure if you’ve used Splunk, but I know it can make your life a whole lot easier. Download our free product here: http://www.splunk.com

By: Hypervisor.fr » Blog Archive » Rediriger les logs d’ESX/ESXi vers un serveur syslog

Sun, 08 Feb 2009 12:42:02 +0000

[...] Ackerson de mainesysadmin.com à posté sur son blog un article pour configurer le syslog d’ESX et permettre de regrouper les logs de tous vos ESX vers un serveur [...]

By: NiTRo

NiTRo — Thu, 05 Feb 2009 01:14:32 +0000

Hi, thanks for sharing the infos about config files, anyway i was very surprised since it could be files that vmware choice to keep when updating packages. Since only ESXi could be managed by the Set-VMHostSysLogServer powershell command, i guess i’m going to do the hadwork again on my hosts

for the avatr, i registered my blog on http://dashboard.wordpress.com

By: Tom

Tom — Thu, 05 Feb 2009 00:41:58 +0000

@nitro Sorry to hear you lost your config! After completing configuration on my ESX servers I like to backup a few files to a remote server so I can share the configs with other ESX servers easily. Files like:

/etc/ssh/sshd_config
/etc/ntp.conf
/etc/hosts
/etc/hosts.allow
/etc/hosts.deny
/etc/snmp.conf
/etc/syslog.conf

That’s a good start.

By: NiTRo

NiTRo — Thu, 05 Feb 2009 00:19:33 +0000

i just update one of my ESX today and no more syslog. the /etc/syslog.conf was reset to initial state too bad

By: NiTRo

NiTRo — Thu, 08 Jan 2009 11:45:09 +0000

Thanks for the tips.

It’s really strange from vmware to let do the syslog sonfig from a VI client for ESXi but not for regular ESX…