Events of Supervisor is garbled in syslog server

Products

• VMware vSphere Kubernetes Service

Issue/Introduction

• Supervisor control plane has been configured with remote syslog server. See Streaming Logs of the Supervisor Control Plane to a Remote rsyslog
• The protocol of syslog server is configured with TLS in vCenter Server VAMI portal.
• Events from Supervisor are garbled.

Environment

vSphere with Tanzu

Cause

The Workload Control Plane service monitors the vCenter Server rsyslog configuration by polling logs periodically. If the Workload Control Plane service detects that the remote vCenter Server rsyslog configuration is not empty, the service propagates this configuration to each control plane VM in all Supervisors. If the protocol of syslog configuration is TLS, the events from Supervisors are encrypted. The syslog server is unable to decode them.

Resolution

To workload the issue:

1. Login vCenter Server VAMI portal at https://<VC-IP-or-FQDN>:5480
2. Click Syslog.
3. Edit syslog server item under Forwarding Configuration.
4. Click drop down list of Protocol
5. Select TCP or UDP
6. Click Save