I am trying to determine if my Syslog Collector I just set up in vCenter 5 is working correctly.
According to this VMware KB article and this VMware blog article, everything seems to be up and running but I don't see any data in the data folder.
Things I have checked:
- The Windows firewall on vCenter has the ports set to allow inc from the Syslog Collector.
- The service is running
- The directories are there, the install went OK, no errors.
- Viewing the Syslog collector in vCenter display setting I set during setup under Home>Administration>Network Syslog Collector> vCenter name. Appears to be listening.
So should I see data under \data right from the start or does something 'bad' have to happen before I see data populate in the folder that Syslog is pointed at? In vCenter there are columns for Host, Logging to, Size listed under Home>Administration>Network Syslog Collector> vCenter name, but I don't see any of my hosts in vCenter listed there.
Check your outbound firewall rules on your hosts if they are also ESXi 5. The default changed recently to deny outbound syslog by default.
Okay, I just ran into the same problem myself. From this blog post:
Sometimes it's the simple things...