Syslog

[Peter_1971]

Hi
About to enable syslog monitoring via nworks.
What is the correct syntax if I want to have syslog generate messages for all events in a vmware host.

[Irina Simkina]

Hi Peter,

To enable syslog on a ESX host you need to modify the /etc/syslog.conf by adding the record like this:
ftp.crit @[collector IP],
or
kern.*@[collector IP]

where ftp.crit and kern.*- type of errors.

For ESXi you should use VI client.

please refer our MP Operations guide (http://www.veeam.com/files/guide/nworks ... _guide.pdf)
section "APPENDIX B. SYSLOG AND COS FILE SYSTEM USAGE MONITORING" for information how to enable syslog in nworks.
also refer syslog.conf manual to get list of possible errors.

With best regards,
Irina

[Peter_1971]

Hi
In the Operations Guide it says that if I use "ftp.crit" it will forward Critical and Higher !
Does that mean that i will forward everyting ?

[Alec King]

Hi Peter,

If you really want to forward EVERYTHING, then you would use
*.* [collector IP]
and replace [collector IP] with the IP address of your Collector.

However I would be careful when forwarding ALL Syslog messages - Syslog can be very verbose. You could get hundreds or even thousands of events forwarded. Are you sure you want to see absolutely everything that syslog generates?

And can I ask why you want to see Syslog messages at all? The messages we get from our default VMware API connection are generally much more useful and informative.....

Cheers,
Alec