Symptoms:
- Although the administrator changes the syslog server or port number via "Log Management", VIO keeps sending syslog to the previously configured server.
- From a result of "viocli get deployment", the new configuration is shown.
LOG ANALYTICS IP LOG ANALYTICS PORT READY
10.10.10.20 9000 12/12
- From fluent.conf, the previous configuration remains in store section.
<store>
host 10.10.10.10
http_method post
include_tag_key true
path api/v1/events/ingest
port 514
raise_on_error false
rate_limit_msec 0
scheme http
serializer json
ssl_verify false
tag_key tag
@type vmware_loginsight
</store>