3.2 Configure persistent logging for all ESXi host

Information

NOTE: Update LOG_DIR with the appropriate value for the local environment.

Solution

Perform the following from the vSphere web client-

1. Select the host and go to 'Manage' -> 'Settings' -> 'Advanced System Settings'.
2. Enter Syslog.global.LogDir in the filter.
3. Set the Syslog.global.LogDir to the desired datastore path.
4. Make sure the attribute is highlighted, then click the pencil icon.Alternatively, run the following PowerCLI command-# Set Syslog.global.logDir for each host
Get-VMHost | Foreach { Set-VMHostAdvancedConfiguration -VMHost $_ -Name
Syslog.global.logDir -Value '<NewLocation>' }

Impact-Additional disk space will be required to store log files.

Default Value-When booting from a local disk- YESWhen booting from USB/SD- NOWhen using Auto Deploy Stateless Installs- NO

See Also

https://workbench.cisecurity.org/files/145

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12

Plugin: VMware

Control ID: 04b29206d9e293562fa5d57cfe2ecf42fd760c2eccbc247e76119955d3aa33b5