VMWare ESXi remote syslog format

I've followed the documentation, host can connect to remote log port using nc, but no logs are received. As a remote syslog I'm using Loki and Promtail which only supports RFC 5424.

Does ESXi ship this format? How the format can be changed?


This is probably not exactly what you wanted but you can always send to a syslog server like rsyslog and then forward from there.

The option RSYSLOG_SyslogProtocol23Format will ensure it's RFC5424:

action(type="omfwd" target="promtail-ip-adress" port="514" template="RSYSLOG_SyslogProtocol23Format" protocol="tcp")