VMware ESX/ESXi Log Files

[Michael_Schyma1]

I was wondering how everyone is collecting there VMware ESX/ESXi log files? How are you getting them from the server to the actual system? Is there an agent that can be installed, or can splunk log into VMware and pull the information?

Thank you for any information or references that can be provided.

[Michael_Schyma1 · Accepted solution]

http://wiki.splunk.com/Community:VMwareESXSyslog

[roychen]

Are the instructions in the wiki still valid for VMware ESXi 5.1?

In other words, I can just set Splunk to listen on UDP 514, then login to my ESXi host using the vSphere client, and just configure which syslog server to send to under Configuration -> Advanced Settings -> syslog?

[Michael_Schyma1]

This would be the correct way.