How to forward logs from VCF Operations to an External Syslog Server

Products

• VCF Operations

Issue/Introduction

You need to forward VCF Operations component logs to an external syslog or SIEM solution for centralized monitoring, compliance, or troubleshooting purposes.

In VCF Operations, all component logs are collected centrally by VCF Operations for Logs 9.0. appliance

Environment

VCF Operations 9.0

Cause

Direct log forwarding from VCF Operations to an external syslog server is not supported in VCF 9.0, as the log forwarding feature has been deprecated in this release.

Release notes of VCF Operations 9.0

Resolution

To forward logs from VCF Operations to an External Syslog Server, you can configure log forwarding directly from VCF Operations for Logs 9.0. appliance.

Prerequisites

• Ensure that the Aria Operations for Logs 9.0 appliance is configured as a log collector in: VCF Operations UI > Infrastructure Operations > Configurations > Log Collection

Steps to Configure Log Forwarding

1. Log in to the Aria Operations for Logs 9.0 appliance.

2. From the left-hand menu, navigate to: Log Management > Log Forwarding

3. Provide the required details of the external syslog server (protocol, IP/hostname, port, and format).

4. Save the configuration.

Once configured, all relevant logs from VCF Operations will be forwarded to the external syslog server.

 

Additional Information

Find the documentation mentioned below for more information

https://techdocs.broadcom.com/us/en/vmware-cis/aria/aria-operations-for-logs/8-18/aria-operations-for-logs-8-18/configuring-vrealize-log-insight/add-a-log-forwarding-destination.html