Tag Archives: vCenter

vSphere Syslog Collector 5.5 – Install and Configure

Syslog Collector

Syslog is a way for network devices to send event messages to a logging server – usually known as a Syslog server. The Syslog protocol is supported by a wide range of devices and can be used to log different types of events. An ESXi host will by defaults save its log files locally. This is particularly important for hosts deployed without a persistent scratch Partition, Such as a Stateless host provisioned by Auto Deploy. Syslog Collector also addresses the issue of an Auto Deployed host not having a local disk.  With no local disk the log files are stored on a Ramdisk, which means each time the server boots the logs are lost.   Not having persistent logs can complicate troubleshooting.  Use the syslog collector to capture the ESXi host’s log on a network server.

Syslog Collector on VCSA

A Syslog Collector is bundled with the the vCenter Server Appliance (VCSA) and requires no extra setup. By default logs are saved in /var/log/remote/<HostName>. Just configure the hosts to send their logs to the Syslog collector.

Syslog Collector on a Windows Server

Syslog Collector can be installed on vCenter Server or on a standalone Windows Server.

1. From VMware vCenter Installer media choose vSphere Syslog Collector and Click Install to start the installation process.

SLS12. Select the appropriate language for the Syslog Collector and Click OK.

SLS23. Installer will prepare setup process to guide and install Syslog Collector.

SLS34. On the Welcome screen Click Next to continue.

SLS45. Select Radio button to accept End User License Agreement and Click Next.

SLS56. Select where to install the application and where to stored the logs and also Size of the log file before Rotation and Number of Logs to keep on the Syslog Collector Server. Unless you have specific requirements select default settings and Click Next.

SLS67. Setup Type screen allows to register the Syslog Collector instance with vCenter Server instance. Select VMware vCenter Server Installation and Click Next.

SLS78. On VMware vCenter Server Information screen provide the vCenter Server Name, Port, and Appropriate account credentials to Register Syslog Collector to vCenter Server and Click Next.

SLS8.19. Accept the default ports settings and Click Next.

SLS810. The Next screen allows to choose how the Syslog Collector will be identified on the networks and by the ESXi hosts. It Will detect host name on which we are installing Syslog collector choose default name and Click Next.

SLS911. On Ready to Install screen click Install to begin the installation.

SLS1012. On Installation Completed screen click Finish to complete the Installation.

SLS1613. Once Installation completed connect to vCenter Server –> Home –> Administration –> VMware Syslog Collector–> Double Click to open Syslog Collector.



Configuring ESXi Hosts to Redirect to a Syslog Collector

There are several ways to Configure ESXi hosts to redirect logs to a Syslog Collector.

  • Advanced Configuration Options on the ESXi host
  • Via Host’s command Line
  • Host Profile

Configuring ESXi Hosts using the Advanced Configuration Options

1. Connect to vCenter Server using vSphere Client or Web Client –> Home –> Select Host and Clusters.

2. Select the ESXi Host –> Configuration –> Under Software Advanced Settings.

SLS143. Under Advanced Settings –> Syslog –> Global –> Syslog.global.loghost enter Syslog Collector host name and Click OK to complete the configuration.


Configuring ESXi Hosts using Host’s Command Line

1. Connect ESXi host using putty.

SLS172. Enter the Root credentials to log into to host.

SLS183. Review the existing Syslog Collector Configuration using below command –                                 esxcli system syslog config get

SLS194. If you do not remember the configuration parameters/options use below commands to get the help – esxcli system syslog config set –help

SLS205. To configure the remote log host server and enable syslog collector server on host use this command –

esxcli system syslog set –loghost=vum.dca.com –logdir-unique=true                    

esxcli system syslog reload

SLS216. Verify configuration using below command – esxcli system syslog config get


Configuring ESXi Hosts using Host Profile.

1. Edit the Host profile with below settings.

Advanced Configuration Option –> syslog.global.loghost –> Enter the syslog Collector host name and click OK. Apply this Host Profile on other hosts and compliant.


Done. We are all set now 🙂


Cheers..Roshan Jha

vCenter Site Recovery Manager (SRM) 5.X – Part 3

Now that the connection between the Protected and Recovery Site is established, we have also discussed in Part – 2 How to Download SRA, Install SRA, Rescan SRA, Adding an Array Manager, and Enabling an Array Pair. Now time to discuss about deploying the vSphere Replication (VR). The VR infrastructure consists of the following components:

  • VRM Server: provides the management of the VR Servers across the ESXi hosts
  • VR Server: replicates the virtual machines between sites

vCenter Server Managed IP Address

First we need to configure the vCenter Server Managed IP address. The managed IP address will be used by VRM server to communicate with the extension service on the vCenter Server.

1. In the vSphere Client, go to the Administration menu and select vCenter Server          Settings.

2. Go to Runtime Settings and fill in the vCenter Server Managed IP address.

VR13. Click OK to save and close the window.

Repeat this step for the Recovery Site as well.


VRM Database

Before deploying the VRM Server, a database must be created. Follow these steps to create database for VRM Server:

  1. Login and right click Databases and select New Database.
  2. Provide a suggestive name (i.e. VRMS_DB) and change the owner to i.e. srmadmin. Click OK to create the database.
  3. Close the SQL Server Management Studio and proceed to the next step.

Deploy VRM Server

Next step is the deployment of the VRM Server which is deployed as a virtual appliance from the SRM Server

1. Connect to the protected site of vCenter Server using  vSphere Client.

2. Navigate Home –> Solutions and Applications –> And Site Recovery.

3. Click vSphere Replication in the left pane and make sure the Protected Site is selected. On the left pane under Commands –> Click Deploy VRM Server.

VR24. The Deploy VRM Server wizard will be started, click on OK to begin.

5. Press Next in the Source window of the deployment wizard.

6. In the next step, review the OVF Template Details and press Next to continue.

7. Provide a FQDN name and a location for the VRM Server. Click Next.

VR38. Select the appropriate cluster and select a datastore to store the VRM Server appliance. Click Next.

VR49. Select the disk format, in this case I used the Thin Provision disk type. Click Next to proceed.

10. Provide the Password for the root account, Default Gateway, DNS server, IP Address and Subnet Mask for the appliance. Click Next when ready.

VR511. Click Next on the Configure Service Bindings window.

12. Review the settings and click Finish to start the deployment process.

13. When the deployment finishes the VRM Server VM will be powered on.

Remember to deploy a VRM Server instance on the Recovery Site as well. Wait until the VRM Server is fully started before proceeding to the next step. 

Configure VRM Server

When the VRM Server for the Protected Site is fully started, you will see the VMware Appliance Management Interface (VAMI) displayed and an URL to manage the VRM Server.

1. Next, click on Configure VRM Server under Commands pane in the Site Recovery Manger.

VR62. Ignore the certificate security warning and log in with the root account and the password entered during the deployment wizard.

3. In the Getting Started window, Go to option 1: Startup Configuration. Click on Configuration Page.

VR74. Leave the Configuration Mode to default (Manual Configuration).

5. Select SQL Server as DB Type.

6. Provide the FQDN for the DB Host, in my case the vCenter Server.

7. Leave DB Port to default (1433).

8. Enter the DB Username (i.e. srmadmin) and DB Password.

9. Provide the DB Name (i.e. VRMS_DB) created earlier.

10. Leave the VRM Host value to default.

11. Provide a name for the DB Name.

12. Enter a FQDN for the vCenter Server address and leave the vCenter Server  Port to default (80).

13. Enter the vCenter Server Username, Password and e-mail address.

14. Scroll down and click Generate and Install under the Generate a self-signed certificate. You should receive a message stating that the certificate was successfully generated and installed.

15. On the right side under the Actions menu, click the Save and Restart Service button.

16. Wait until the process completes, if successful you will see the following                     message.

VR817.Note that the status of the VRM Service is now running under the VRM Service Status section.

18. Also, you will be presented with a security warning, select Install this Certificate and click Ignore button.

19. Go back to the Site Recovery Manager and verify that the VRM Server is now configured.

VR9Next, Deploy and Configure the VRM Server at the Recovery Site by following the steps above.

Continue to part 4 where we will pair the VRM Servers between the Protected Site and the Recovery Site and we will deploy the VR Servers.

Click here to go to vCenter Site Recovery Manager (SRM) 5.X – Part 1

 Click here to go to vCenter Site Recovery Manager (SRM) 5.X – Part 2

 Click here to go to vCenter Site Recovery Manager (SRM) 5.X – Part 3

  Click here to go to vCenter Site Recovery Manager (SRM) 5.X – Part 4

  Click here to go to vCenter Site Recovery Manager (SRM) 5.X – Part 5

  Click here to go to vCenter Site Recovery Manager (SRM) 5.X – Part 6

  Click here to go to vCenter Site Recovery Manager (SRM) 5.X – Part 7


Note :- I have used pictures in this post from SRM book written by Abhilash GB and from blog (http://defaultreasoning.com) by Marek.Z and would like to Thank both of them 🙂