Note: Please contact Zebrium at: firstname.lastname@example.org
Collecting logs for Zebrium will involve setting up a Zebrium syslog forwarder within the vSphere environment, and then configuring vCenter to forward syslog events to the Zebrium syslog forwarder.
- VMware vSphere 6.7 or above
- VMware vCenter Server
- Linux VM for forwarding syslogs
Create a VM for hosting the Zebrium syslog forwarder. An Ubuntu 22.04 server with 1 CPU, 2G RAM, and 16G HDD is ideal.
Install the Zebrium syslog forwarder on the new VM by following directions here: https://docs.zebrium.com/docs/setup/syslog-forwarder/
- Configure your vCenter Server to forward vCenter syslogs to your new VM by following the directions here: https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.monitoring.doc/GUID-9633A961-A5C3-4658-B099-B81E0512DC21.html
(optional) For environments with fewer than 30 hosts, ESXi logs can be sent to the vCenter server which in turn will forward them to Zebrium. See this article for instructions: https://kb.vmware.com/s/article/2003322
(optional) For environments where forwarding ESXi logs to vCenter is not ideal, ESXi host logs can be configured to be sent directly to the Zebrium syslog forwarder. There are two ways to accomplish this:
- Configure the ESXi syslog settings via vSphere Inventory Advanced System Settings: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.esxi.upgrade.doc/GUID-9F67DB52-F469-451F-B6C8-DAE8D95976E7.html
- Configure the ESXi Syslog.global.logHost settings with the esxcli tool. https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.esxi.install.doc/GUID-8981F5FA-BB2A-47FB-A59A-7FC5C523CFDE.html
- To send logs to Zebrium directly from VMs, please see the following:
- Linux based VMs: https://docs.zebrium.com/docs/setup/linux/
- Windows based VMs: https://docs.zebrium.com/docs/setup/windows_otel/
- Other VMs: https://docs.zebrium.com/docs/setup/other/
Note: Some VM OSs may support forwarding syslogs. Forwarding the VM syslogs to the Zebrium syslog forwarder created in step 1 might be an efficient VM log collection solution.