5.1

What to do next
You can install and configure vShield components from the vSphere Client.
Specify Syslog Server
If you specify a syslog server, vShield Manager sends all audit logs and system events from vShield Manager
to the syslog server.
Procedure
1 Click Settings & Reports from the vShield Manager inventory panel.
2 Click the Configuration tab.
3 Ensure that you are in the General tab.
4 Click Edit next to Syslog Server.
5 Type the IP address of the syslog server.
6 (Optional) Type the port for the syslog server.
If you do not specify a port, the default UDP port for the IP address/host name of the syslog server is used.
7 Click OK.
Download Technical Support Logs for vShield
You can download vShield Manager audit logs and system events from a vShield component to your PC.
Audit logs refer to configuration change (such as firewall configuration change) logs while system events refer
to events that happen in the background while vShield Manager is running. For example, if vShield Manager
looses connectivity to one of the vShield App or vShield Edge appliances, a system event is logged.
Both audit logs and system events are logged with the syslog server at the Info level. System events, however,
have an internal severity which is added to the syslog message sent for that system event.
Procedure
1 Click Settings & Reports from the vShield Manager inventory panel.
2 Click the Configuration tab.
3 Click Support.
4 Under Tech Support Log Download, click Initiate next to the appropriate component.
Once initiated, the log is generated and uploaded to the vShield Manager. This might take several seconds.
5 After the log is ready, click the Download link to download the log to your PC.
The log is compressed and has the file extension .gz.
What to do next
You can open the log using a decompression utility by browsing for All Files in the directory where you saved
the file.
Chapter 3 Management System Settings
VMware, Inc. 19