Enable Syslog
Syslog Matches will come from
-
NSX-T manager: NSX-T change messages will be generated from the NSX-T manager itself
-
Edge Transport Nodes: Every edge transport node will log usage for North-South traffic (Gateway Firewalls)
-
Hosts: Every Host for guest VMs will log usage for East-West traffic (Distributed Firewall).
Previous version of NSX-T required the user to go to the CLI of each system and Edge Node and manually configure syslog setup. As of version 3.x that no longer appears to be required and may be setup via the NSX-T Manager. Please see VMware documentation for precise configuration for any given version.
To enable syslog for tracking usage:
-
In the NSX-T GUI go to System > Fabric > Profiles > Node Profiles > "All NSX Nodes" > Syslog Servers.
-
Click Add.
-
Configure the new syslog server with an Informational log level.
-
Fill out the form and click Save.