With ESXi, after configuring syslog using vMA, when I open a local session directly on the ESXi host(using “unsupported” mode), the only option that appears in the /etc/syslog.conf file is:
loghost=syslog_server_ip
I can’t find an option to define the minimum logging level, like in ESX server “classic” (local6.notice and local6.warning), in ESXi everything is logged as “local4.info” including any errors.
Itzik
afaik, that is correct. It's either on/off and it'll allow you to log the following files:
e.g.
hostd.log hostd.log.1 messages.log messages.log.1 vmkernel.log vmkernel.log.1 vmksummary.txt vmkwarning.log vmkwarning.log.1 vpxa.log vpxa.log.1
=========================================================================
William Lam
VMware vExpert 2009
VMware ESX/ESXi scripts and resources at:
VMware Code Central - Scripts/Sample code for Developers and Administrators
If you find this information useful, please award points for "correct" or "helpful".
The best option is to use a syslog server with filtering capabilities. Syslog-ng works well and can be installed on vMA.