Modifying VMware Syslog Collector settings : increase log retention

Go to your syslog collector machine.


1. Stop the Vmware Syslog collector service
2. back up :
%PROGRAMDATA%\VMware\VMware Syslog Collector\vmconfig-syslog.xml file.  











3. Now edit the vmconfig-syslog.xml file.  
I am using notepad







4. Calculate usage
I want to modify the settings so that my logs size is upped from 2mb to 10mb and we rotate after 40 logs not 20.
Here we need to do some planning to see if we have enough free space.
Count hosts: 100
Current size log max: 2
Current rotation count: 20
Total possible MB used: 100x2x20 = 4,000MB  (4gb)


Count hosts: 100
Desired size log max: 10
 desired  count: 40
Total possible MB used: 100x10x40=40,000MB (40GB)




So the drive where your logs are stored would need 40gbfree in the above example to be able to service future demands.


5. Modify the values in note pad
Modifying this:


<defaultValues>
<port>514</port>
<protocol>TCP,UDP</protocol>
<maxSize>10</maxSize>
<rotate>40</rotate>
<sslPort>1514</sslPort>
</defaultValues>









6. Start the syslog collector service






See also :
http://kb.vmware.com/kb/2021652