NSX-T ESXi hosts logging identifier's changed in NSX-T 3.2.

Products

• VMware NSX

Issue/Introduction

Prior to NSX-T 3.2, the following syslog identifiers where used :

• FIREWALL_PKTLOG
• DLB_PKTLOG
• nsx_logger
• IDPS_EVT

Due to RFC compliance, these where changed from v3.2 onwards to :

• FIREWALL-PKTLOG
• DLB-PKTLOG
• nsx-logger
• IDPS-EVT

Note : The underscore has changed to a hyphen.

List of APP Names used :

FIREWALL-PKTLOG	DFW Packet Logs
DLB-PKTLOG	DLB Access Logs
IDPS-EVT	IDPS Events
nsxdavim	NSX Discovery Agent Logs
nsxavim	NSX Agent logs
opslldpvim	LLDP Logs
nsx-syslog	NSX Logs

Environment

VMware NSX-T Data Center
VMware NSX-T Data Center 3.x

Resolution

There is no functional impact from this change.
You may need to alter how you search log entries received from the ESXi host to match the new identifiers.