Investigation and Utilization of vSphere Logs Transferred to a Syslog Server

Products

• VMware vCenter Server
• VMware vSphere ESXi

Issue/Introduction

The logs required for investigating an issue have already been rotated.
Logs from the time of the issue exist on the Syslog server; can these be used as investigative material?

Environment

vSphere

Resolution

While we typically conduct investigations for incidents and other issues using diagnostic information (log bundles), it is possible to extract logs from a Syslog server for investigation when the logs at the time of the incident have been rotated.

Additional Information

Japanese : https://knowledge.broadcom.com/external/article/418149