Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to determine if my Syslog Collector I just set up in vCenter 5 is working correctly.

According to this VMware KB article and this VMware blog article, everything seems to be up and running but I don't see any data in the data folder.

Things I have checked:

  1. The Windows firewall on vCenter has the ports set to allow inc from the Syslog Collector.
  2. The service is running
  3. The directories are there, the install went OK, no errors.
  4. Viewing the Syslog collector in vCenter display setting I set during setup under Home>Administration>Network Syslog Collector> vCenter name. Appears to be listening.

So should I see data under \data right from the start or does something 'bad' have to happen before I see data populate in the folder that Syslog is pointed at? In vCenter there are columns for Host, Logging to, Size listed under Home>Administration>Network Syslog Collector> vCenter name, but I don't see any of my hosts in vCenter listed there.

share|improve this question
up vote 0 down vote accepted

Okay, I just ran into the same problem myself. From this blog post:

Also, apparently vCenter updates this only as you start the client, there is not refresh button, so as you fix this or add servers to this syslog collector you need to exit vCenter and come back in to see them.

Sometimes it's the simple things...

share|improve this answer

Check your outbound firewall rules on your hosts if they are also ESXi 5. The default changed recently to deny outbound syslog by default.

share|improve this answer
Super! Defiantly a face palm moment... should have known to look there. I had the tcp://, upd://, ssl:// setup under advanced>global, but not those firewall settings. The documentation needs 1 more step. – Chadddada May 10 '12 at 18:00
Hmmm I clearly see the logs accumulating in the correct folder on my vCenter server. However looking at the Syslog Collector Overview has yet to update the columns, (Host, Logging to, Size). I restarted the syslog service but nothing there yet. Any pointers on that? – Chadddada May 10 '12 at 18:13
Sorry, that's all I know. – hwilbanks May 11 '12 at 15:19

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.