[Discuss] remote syslog from esx servers?

[Johnny Stork]

I have a couple of esx 3 servers I maintain and I am trying to send 
their syslogs to a another linux server on the same network which has 
been setup for this. That server is running RHEL5 and already has 
various linux machines sending their syslog events to it without any 
problems.

So I simply changed the line previous set to /var/log/messages to the 
remote syslog server.

*.info;mail.none;authpriv.none;cron.none;local6.none;local5.none 
@192.168.10.71

However, nothing is getting logged and locally the message log (which I 
kept running as well), shows the following after a syslog restart.

Any ideas? The "Operation not permitted" seems suspicious



Jan 15 16:18:59 esx2 kernel: Kernel log daemon terminating.
Jan 15 16:19:00 esx2 syslog: klogd shutdown succeeded
Jan 15 16:19:00 esx2 exiting on signal 15
Jan 15 16:19:00 esx2 syslogd 1.4.1: restart.
Jan 15 16:19:00 esx2 syslogd: sendto: Operation not permitted
Jan 15 16:19:00 esx2 syslog: syslogd startup succeeded
Jan 15 16:19:00 esx2 kernel: klogd 1.4.1, log source = /proc/kmsg started.
Jan 15 16:19:00 esx2 syslog: klogd startup succeeded
Jan 15 16:19:00 esx2 syslog: syslogd shutdown succeeded