Configure external syslog server on NSX manager for central logging or SIEM purposes
From Notes_Wiki
Home > VMWare platform > VMWare NSX > Configure external syslog server on NSX manager for central logging or SIEM purposes
Configuring syslog server on NSX requires doing SSH to cluster IP / NSX manager IP and using:
set logging-server <syslog-server> proto udp level info
Later we can validate settings via:
get logging-servers
After this we still need to go to Distributed firewall and for each firewall rule enable option of logging for that rule so that we can capture connection logs.
See: https://iwanhoogendoorn.nl/index.php/Configuring_syslog_services_on_NSX-T_components
Home > VMWare platform > VMWare NSX > Configure external syslog server on NSX manager for central logging or SIEM purposes