NSX-T ESXi hosts logging identifier's changed in NSX-T 3.2
search cancel

NSX-T ESXi hosts logging identifier's changed in NSX-T 3.2

book

Article ID: 322568

calendar_today

Updated On:

Products

VMware NSX

Issue/Introduction

Prior to NSX-T 3.2 the following syslog identifiers where used:
  • FIREWALL_PKTLOG
  • DLB_PKTLOG
  • nsx_logger
  • IDPS_EVT

Due to RFC compliance, these where changed from 3.2 onwards to:
  • FIREWALL-PKTLOG
  • DLB-PKTLOG
  • nsx-logger
  • IDPS-EVT

Note, the underscore has changed to a hyphen.

List of APP NAMES used:
FIREWALL-PKTLOG  DFW Packet Logs  
DLB-PKTLOGDLB Access Logs
IDPS-EVT    IDPS Events
nsxdavim                         NSX Discovery Agent Logs
nsxavim                           NSX Agent logs
opslldpvim                      LLDP Logs
nsx-syslogNSX Logs


Environment

VMware NSX-T Data Center
VMware NSX-T Data Center 3.x

Resolution

There is not functional impact from this change, you may need to alter how you search log entries received from the ESXi host to match the new identifiers.