7.0

Table 5-23. Syslog Options Available Starting from ESXi 7.0 Update 1 (continued)
Option ESXCLI command Description
Syslog.global.remoteHost.maxMs
gLen
esxcli system syslog
config set --remote-host-max-
msg-len=<long>
For the TCP and SSL protocols, this
parameter specifies the maximum
length of a syslog transmission
before truncation occurs, in bytes.
The default maximum length for
remote host messages is 1 KiB.
You can increase the maximum
message length to up to 16 KiB.
However, raising this value above
1 KiB does not ensure that long
transmissions arrive untruncated to a
syslog collector. For example, when
the syslog infrastructure that issues a
message is external to ESXi.
RFC 5426 sets the maximum message
transmission length for the UDP
protocol to 480 bytes for IPV4 and
1180 bytes for IPV6.
Syslog.global.vsanBacking esxcli system syslog config
set --vsan-backing=<bool>
Allows log files and the audit record
storage directory to be placed on a
vSAN cluster. However, enabling this
parameter might cause the ESXi host
to become unresponsive.
Configure Log Filtering on
ESXi Hosts
The log filtering capability lets you modify the logging policy of the syslog service that is running
on an ESXi host. You can create log filters to reduce the number of repetitive entries in the ESXi
logs and to denylist specific log events entirely.
Starting with vSphere 7.0 Update 2, you can add logfilters and enable logfitering by using ESXCLI.
Log filters affect all log events that are processed by the ESXi host vmsyslogd service, whether
they are recorded to a log directory or to a remote syslog server.
When you create a log filter, you set a maximum number of log entries for the log messages.
Log messages are generated by one or more specified system components that match a specified
phrase. You must enable the log filtering capability and reload the syslog daemon to activate the
log filters on the ESXi host.
Important Setting a limit to the amount of logging information restricts your ability to
troubleshoot potential system failures properly. If a log rotate occurs after the maximum number
of log entries is reached, you might lose all instances of a filtered message.
Prerequisites
Install ESXCLI. See Getting Started with ESXCLI . For troubleshooting, run esxcli commands in
the ESXi Shell.
VMware ESXi Installation and Setup
VMware, Inc. 233