Collects event messages sent with the syslog protocol, which is how SIEM systems get Veeam events. With a paid licence, Veeam Backup & Replication can forward to a single such server in RFC 5424 format over TCP or UDP port 514 or TLS port 6514.
Read more: Veeam Help Center
In the Ultra Transcenders books
Each book explains syslog server in context, with comparison tables and the common traps.
Terms in this definition
- Event
Table in Log Analytics where entries from Windows event logs are kept.
- Agents (classic) API
First-generation Foundry Agent Service API, based on threads, messages and runs. It is deprecated, replaced by conversations and responses, and retires on 31 March 2027.
- Syslog
Table in Log Analytics holding syslog messages from Linux.
- SIEM
A platform that gathers and correlates security logs to detect threats and raise alerts. In Azure the cloud SIEM is Microsoft Sentinel, which runs on a Log Analytics workspace.
- Get
Key Vault permission on secrets that allows a single secret to be read; App Service Key Vault references need nothing beyond it.
- SEAT
Stats, events, alarms and tasks: the history stored in the vCenter database. Trends for SEAT, DB log and core space appear under Monitor > Database in the VAMI.
- Licence
What entitles one particular user to the services a subscription offers. Each product licence is made up of several service plans (one per app or service), and before giving it to someone an admin has to record that user's usage location.
- RFC
Request for Comments, the IETF's standards documents. NSX takes 100.64.0.0/10 from RFC 6598 for internal Tier-0 to Tier-1 transit links unless given another block at deployment, and VCF design guidance advises RFC 1918 private IPv4 space for infrastructure subnets.
Related terms
- Log forwarding
Passing logs along to a further destination. vCenter does this from the Syslog page in the VAMI, for a maximum of three hosts, and VCF Operations for logs can target a syslog server or a second logs instance from its own UI.
- Policy hit logs
Entries showing whether a Flow security policy permitted or blocked each network flow. Host nodes hold them by default until a syslog server is set up to receive them.
- RELP
A protocol vCenter can choose when sending its logs to a syslog server configured in the VAMI. The alternatives are TLS, TCP and UDP.
- RELP
A way of transporting logs that Prism Central offers, next to UDP and TCP, for sending them to a syslog server.
- Syslog monitoring
Sends logs from clusters registered with Prism Central on to a syslog server elsewhere. Transport is UDP or TCP, and RELP can be added.