Syslog server not recieving logs from vCenter Server appliance
Article ID: 432069
Updated On:
Products
Issue/Introduction
After configuring a vCenter Server with a remote syslog configuration, the target server does not recieve the logs from vCenter.
In the vCenter Server VAMI, the Connection Status for the syslog server configuration is shown as Reachable.
From the rsyslogd-syslog.log file, you may see an error similar to the following:
####-##-##T##:##:##.######+##:## err rsyslogd omfwd: remote server at <rsyslog-server:port> seems to have closed connection. This often happens when the remote peer (or an interim system like a load balancer or firewall) shuts down or aborts a connection. Rsyslog will re-open the connection if configured to do so (we saw a generic IO Error, which usually goes along with that behaviour).
Environment
vCenter Server 8.x
Cause
This is due to a networking issue upstream of the vCenter Server appliance (switch / firewall / etc.).
Resolution
Further review of the network / firewall configuration is suggested.
For additional assistance in troubleshooting networking issues with the vCenter Server appliance, see KB322847.
Additional Information
Feedback
