Suggestions for better vmware syslog load balancing?

[kkentsplunk]

Hi All,

How do you guys load balance syslog from all your esxi hosts? We have a few hundred hosts and 5 DCNs. If we manually configure Syslog.global.logHost on all the esxi hosts through a script or host profile we would be manually load balancing which DCN they send syslog to, and have to account for that in future host growth.

Any better way to do this?

Thanks

[mgildenhorn_spl]

Syslog data doesn't have to go to the DCN's. The DCN's are only required for pulling the metrics from the vSphere API from the vCenter machine. You could set up the syslog data to be sent to a syslog server. Then put a Universal Forwarder on that server to send the data up to your indexers.