I've followed the documentation, host can connect to remote log port using nc
, but no logs are received. As a remote syslog I'm using Loki
and Promtail which only supports RFC 5424
.
Does ESXi ship this format? How the format can be changed?
I've followed the documentation, host can connect to remote log port using nc
, but no logs are received. As a remote syslog I'm using Loki
and Promtail which only supports RFC 5424
.
Does ESXi ship this format? How the format can be changed?
This is probably not exactly what you wanted but you can always send to a syslog server like rsyslog and then forward from there.
The option RSYSLOG_SyslogProtocol23Format
will ensure it's RFC5424:
action(type="omfwd" target="promtail-ip-adress" port="514" template="RSYSLOG_SyslogProtocol23Format" protocol="tcp")