This article describes how set up a Syslog server when you are experiencing issues across multiple XenServers and need to capture logs real-time on a central location.
Note: XenServer 6.2 will display logs locally even when enabling remote logging.
The following are the requirements:
Windows XP/2003 Server System (Installation of the Syslog Daemon)
Windows System with XenCenter installed and access to XenServer Properties
Complete the following procedures:
Download and install the Kiwi syslogd server for log collection at the following site https://www.kiwisyslog.com/kiwi-syslog-server and accept all the defaults.
Disable any firewall or port blocking on the Windows computer on which the syslog server is installed.
Start the syslog daemon by selecting Start/AllPrograms/KiwiEnterprises/KiwiSyslogDaemon/ KiwiSyslogDaemon.
Syslog Daemon Started and Running:
Each XenServer needs to be configured to send logs to the Syslog Daemon.
Open XenCenter and right-click on the XenServer you want to configure to send logs to Syslog Daemon and select Properties.
Click the Log Destination tab and set the following settings.
Select the Remote selection.
Enter the IP address of the Syslog Daemon Server.
Select OK.
If server is set up and logs are being directed to the syslog server, you can see activity on the Syslog Daemon server as follows:
(Syslog Daemon Receiving Logs)Repeat the preceding steps for all remaining XenServers.
Make note of the date and hostname where logs are originating.
Retrieve the logs as required.
To retrieve the logs from the Windows system you go to navigate to the C:\Program Files\Syslogd\Logs directory.
Copy the SyslogCatchAll.txt file and send it to Citrix Technical Support as needed.