How do I create or update a syslog integration in
VMware Aria Automation

You can configure
VMware Aria Automation
to send your logging information to remote syslog servers.
Configure a remote syslog server.
The
vracli remote-syslog set
command is used to create a syslog integration or overwrite existing integrations.
VMware Aria Automation
remote syslog integration supports the following connection types:
  • Over UDP.
  • Over TCP without TLS.
    To create a syslog integration without using TLS, add the
    --disable-ssl
    flag to the
    vracli remote-syslog set
    command.
  • Over TCP with TLS.
You can only configure a single remote logging integration.
VMware Aria Operations for Logs
is prioritized in the event that both a
VMware Aria Operations for Logs
server and a syslog server are available.
For information on configuring logging integration with
VMware Aria Operations for Logs
, see How do I configure log forwarding to VMware Aria Operations for Logs in VMware Aria Automation.
  1. Log in to the
    VMware Aria Automation
    appliance command line as
    root
    .
  2. To create an integration to a syslog server, run the
    vracli remote-syslog set
    command.
    vracli remote-syslog set -id name_of_integration protocol_type://syslog_URL_or_FQDN:syslog_port
    If you do not enter a port in the
    vracli remote-syslog set
    command, the port value defaults to 514.
    You can add a certificate to the syslog configuration. To add a certificate file, use the
    --ca-file
    flag. To add a certificate as plaintext, use
    --ca-cert
    flag.
  3. To overwrite an existing syslog integration, run the
    vracli remote-syslog set
    and set the
    -id
    flag value to the name of the integration you want to overwrite.
    By default, the
    VMware Aria Automation
    appliance requests that you confirm that you want to overwrite the syslog integration. To skip the confirmation request, add the
    -f
    or
    --force
    flag to the
    vracli remote-syslog set
    command.
To review the current syslog integrations in the appliance, run the
vracli remote-syslog
command.