How to Install and Configure Syslog Collect for vSphere 5.x

Article Summary: This article provides information on how to install and configure Syslog Collector for vSphere 5.x.

How to Install and Configure Syslog Collect for vSphere 5.x :

• Install Syslog collector on vCenter Server or standalone server : 
• Execute the Autorun off of the vCenter Server DVD or ISO
• Select vSphere Syslog Collector  on the left and click on the Install button
•  
•   
• You will need to choose whether you want this install to be integrated with vCenter Server (recommended) or if you are installing it on a standalone server
• Configure host to log remotely :
• vSphere Client :
• Click on the host on the left
• Click on the Configuration tab
• Click on Advanced Settings under Software
• Click on the + next to Syslog and then click on Global
• In the Syslog.global.logHost field, input the hostname or IP address of your Syslog Collector server 
• NOTE : Multiple hosts can be used and should be separated by a comma.
•  
•   
• Click on the OK button
• Enable firewall rule : 
• Click on Security Profile underneath Software
• Click on Properties to the right of Firewall
• Scroll down until you see syslog, put a check next to syslog, and then click on the OK button
•  
•   
• SSH :
• # esxcli system syslog config set --loghost=<hostname or IP of Syslog Collector server>
• # esxcli system syslog reload
• # esxcli network firewall ruleset set --ruleset-id=syslog --enabled=true
• # esxcli network firewall refresh
• On the Syslog Collector server, navigate to the %PROGRAMDATA%\VMware\VMware Syslog Collector\Data\ folder
• You should a folder inside with the IP of the ESXi host that was configured for remote syslog
•  
•   
• Verify configuration :