Using Syslog server to forward the logs from vCenter is essential and best practice, forwarding logs to syslog server should always be in your configuration checklist. This is also a automated best way to ensure all the logs are streamed. Collected logs are used later for better troubleshooting vCenter server related issues incase of vCenter is failed. This also achieve the goal of centralizing vCenter server streaming logs on syslog server.
To configure Syslog server login to vCenter VAMI url portal (https://vCenterserver:5480), Go to Syslog >> and on Forwarding Configuration click CONFIGURE.
Note: Prior to setting up the forwarding configuration, remote syslog server(must) be configured and a network connection must exist between the vCenter server and syslog server(s) to enable log streaming.
On the Create Forwarding Configuration type Remote (syslog host) Server Address, protocol and port number. For protocol options there are 4 options - TCP, RELP, TLS, UDP. Also you can setup maximum 3 remote syslog hosts by clicking + Add button.
Configure syslog on VMware ESXi hosts: VMware best practices
New Remote Syslog Host is added and make sure Connection Status is Reachable. Click Send Test Message to test the connection.
You can manually verify from remote syslog servers if the message has been received, below is the message format.
Test message: This is a diagnostic syslog test message from vCenter Server.
Servers: <Syslog Server>
I can verify on remote syslog server, It is working good.
If you want to later modify or add addition Syslog servers click Edit button. To delete syslog configuration click Delete.
VMWare Best practices
vSphere PowerCLI - Configure syslog on VMware ESXi hosts and Enable security profile firewall
VMWARE SECURITY BEST PRACTICES: POWERCLI ENABLE OR DISABLE ESXI SSH
vSphere ESXi security best practices: Time configuration - (NTP) Network Time Protocol
POWERCLI AND VSPHERE WEB CLIENT: JOIN ESXI INTO ACTIVE DIRECTORY DOMAIN CONTROLLER
Resolved syslog error: Call OptionManager.UpdateValues for object ha-adv-options on ESXi failed