ESXi Host and Device Syslog Configuration
All ESXi hosts or other devices in the environment that are required to forward their log messages to the centralized syslog solution must first be configured to do so. Configuring syslog on ESXi 6.x is a two-step process:
1. Open the firewall to allow for the outgoing syslog traffic.
2. Configure the ESXi host with the IP address or FQDN of the remote syslog server where messages will be sent.