Another helpful tool in the toolbox of troubleshooting is having a remote syslog server configured. There may be times where an investigation is required in the environment but when attempting to review the logs it is discovered that they are no longer available. Often times this is a result of the increased logging that happened during the time of the issue. The increased logging leads to thresholds for file size and counts being exceeded and thus the older logs are automatically deleted as a result.
Everpure recommends the use of the VMware vRealize Log Insight OVA. This provides for a quick and easy integration for the ESXi hosts and vCenter. Additionally, the Web Guide: FlashArray Content Pack for vRealize Log Insight User Guide can be used with vRealize Log Insight which provides a single logging destination for both the vSphere and Everpure environments.
Configuring vCenter Server and ESXi with Log Insight
As explained above, configuring vCenter Server and ESXi is a relatively quick and simple process.
- Login to VMware vRealize Log Insight.
- Click on Administration.
- Under Integration click on vSphere.
- Click + Add vCenter Server.
- Fill in the applicable vCenter Server information and Test Connection.
- Ensure the following boxes are checked:
- Collect vCenter Server events, tasks, and alarms
- Configure ESXi hosts to send logs to Log Insight
- Click Save to commit all of the requested changes.
The following screenshot is applicable for vRealize Log Insight 8.x. If you have an earlier version of Log Insight then you can refer to the VMware documentation here on how to properly configure vCenter and ESXi.
Additional Remote syslog Options
It is understood that not every customer or environment will have vRealize Log Insight installed or available. If your environment takes advantage of a different solution then please refer to the third party documentation on how the best way to integrate it with your vSphere environment. You can also refer to VMware's Knowledge Base article Configuring syslog on ESXi for additional options and configuration information.