How do I create or update a syslog
integration in VMware Aria Automation
VMware Aria Automation
You can configure
VMware Aria Automation
to send your logging information to remote syslog
servers.Configure a remote syslog server.
The
vracli remote-syslog
set
command is used to create a syslog integration or overwrite
existing integrations.VMware Aria Automation
remote syslog integration supports the
following connection types:- Over UDP.
- Over TCP without TLS.To create a syslog integration without using TLS, add the--disable-sslflag to thevracli remote-syslog setcommand.
- Over TCP with TLS.
You can only configure a single remote logging integration.
VMware Aria Operations for Logs
is prioritized in the
event that both a VMware Aria Operations for Logs
server and a syslog server are available.For information on configuring logging integration with
VMware Aria Operations for Logs
, see How do I configure log forwarding to VMware Aria Operations for Logs in VMware Aria Automation.- Log in to theVMware Aria Automationappliance command line asroot.
- To create an integration to a syslog server, run thevracli remote-syslog setcommand.vracli remote-syslog set -id name_of_integration protocol_type://syslog_URL_or_FQDN:syslog_portIf you do not enter a port in thevracli remote-syslog setcommand, the port value defaults to 514.You can add a certificate to the syslog configuration. To add a certificate file, use the--ca-fileflag. To add a certificate as plaintext, use--ca-certflag.
- To overwrite an existing syslog integration, run thevracli remote-syslog setand set the-idflag value to the name of the integration you want to overwrite.By default, theVMware Aria Automationappliance requests that you confirm that you want to overwrite the syslog integration. To skip the confirmation request, add the-for--forceflag to thevracli remote-syslog setcommand.
To review the current syslog integrations in the appliance, run the
vracli
remote-syslog
command.