VSphere 5.1 Syslog Server

• It is used to redirect the ESXi Host logs to Vcenter server. 
• Sys log server is normally installed on a vCenter server.
• Machine that connects to the vCenter Server through the vSphere Client must have an IPv4 address for the Syslog Collector service to work.

Configuration of Sys log server is fairly simple.

Pre-requisites :

1. Install the Syslog application from vSphere installation Media .
2. Know the retention policy 
3. Check if firewall port 514  is not blocked in vCenter server

Following steps can be used to configure the sys log server

1. Enable the sys log service in all the ESX hosts in the cluster.
   
   ESX Host => configuration =>security Profile =>firewall=>Syslog (hit the check box)
   
2. Set the sys log path for each host in the cluster
   
   ESX Host =>Advanced Settings =>Syslog=>global=>syslog.global.loghost
    Set  to  tcp://vcenterip:514
   
3. Connect to ESXi Host and restart the syslog service.
   
   esxcli system syslog reload
   
4. Configured settings can be found at