Forward VMware Horizon View Events to Syslog Server


In addition to logging Horizon View events to event database, you can configure to send View events to Syslog servers ( Like Splunk, KiwiSyslog Server, WhatsUplog management etc…)  or to a local log file or to a UNC path somewhere in the network.  The limitation with the local file is maximum size of the event log directory can’t go more than 300 MB, if it grows more than 300 MB size, old logs will be deleted automatically. Default path for local syslog files is: %PROGRAMDATA%\VMware\VDM\events\.

To configure Events on Horizon View, environment,
·         login to View administrator console
·         Navigate to View Configuration – Event Configuration
·         In syslog section, click “add” next to “send syslog servers” and enter syslog server IP and port number (generally that is UDP port 514).
·         If you want to store log files to be stored locally, select “log to file: Enable” 
VMware View events to file or UNC file share
·         If you want to specify UNC path to send logs you specify path for events hereby navigating to “copy to location” and select “add”. You need to provide UNC path and credentials to access the path here

This configuration needs to be done only one view connection server and settings will be automatically replicated to other view connection servers on group. 

This is an alternate option if you don’t want to create a database for events on your database server for any reason.

If you want to analyze and confirm the health of your VMware vSphere/ View environment as per VMware best practices, refer to this article " VMware Health Analyzer 5 download, install and usage steps"

Please share on social media if you found this post helpful. If you have a comment or question, please post and add your voice to the conversation.

1 comment:

  1. I really appreciate information shared above. It’s of great help. If someone want to learn Online (Virtual) instructor lead live training in IBM QRADAR SIEM , kindly contact us http://www.maxmunus.com/contact
    MaxMunus Offer World Class Virtual Instructor led training On IBM QRADAR SIEM. We have industry expert trainer. We provide Training Material and Software Support. MaxMunus has successfully conducted 100000+ trainings in India, USA, UK, Australlia, Switzerland, Qatar, Saudi Arabia, Bangladesh, Bahrain and UAE etc.
    For Demo Contact us.
    Saurabh Srivastava
    MaxMunus
    E-mail: saurabh@maxmunus.com
    Skype id: saurabhmaxmunus
    Ph:+91 8553576305 / 080 - 41103383
    http://www.maxmunus.com/

    ReplyDelete