ESXi, Vmware, logs by udp syslog

[test_qweqwe]

1. Installed addon Splunk_TA_esxilogs from https://splunkbase.splunk.com/app/3215/ and moved to /depployment-apps
2. Configured esxi by https://wiki.splunk.com/Community:VMwareESXSyslog so it send logs to my heavy forwarded which have open port 514.

Logs do not come. Where I missed?

[nickhills]

The VMware deployment is quite complex:
http://docs.splunk.com/Documentation/AddOns/released/VMW/Collectionconfiguration

However, assuming you just want to capture the syslog, have you configured a UDP input on your heavy forwarder/indexer?
The TA wont set this up for you.

If you have, then its all the usual suspects to check next, addresses/firewalls/routes etc,