The NSX Manager is showing alarms indicating that 'one or more ESXi nodes are not currently configured to forward log messages to a remote logging server.'

Products

• VMware NSX

Issue/Introduction

Title: Alarm for Remote Logging Not Configured
Event ID: logging.remote_logging_not_configured

Alarm Description

• Purpose: Indicates if remote logging server is not configured for the ESX hosts.

Environment

VMware NSX 

Cause

The alarm indicates that the ESXi hosts are not configured to forward logs to a remote logging server.

Resolution

Verification and Configuration of Remote Syslog on ESXi Hosts

Verify Current Configuration

Run the following command on each ESXi host to verify if syslog is configured:

esxcli system syslog config get

If the configuration is missing, proceed with the steps below.

Configure via vCenter UI

1. Open the vCenter UI and select an ESXi host.

2. Navigate to Configure → Advanced System Settings, then click Edit.

3. Use the filter icon next to the Key field and type loghost.

4. In the Value field, enter:

udp://syslog.server:514

         (Replace syslog.server with the correct IP or FQDN of the syslog server. If using a custom port, update it accordingly.)

1. Click OK to save the changes.

Configure via ESXi CLI (Alternative Method)

You can also configure the remote syslog server using the ESXi CLI:

esxcli system syslog config set --loghost=<str>

esxcli system syslog reload

Verify Configuration

Run the following command to confirm the settings:

esxcli system syslog config get

For more information, refer to VMware’s documentation: Configuring Syslog on ESX

 

Additional Information

Configure a Node Profile
Configure Remote Logging (NSX)