→ Applies to: VMware ESXi 6.5.0 and above

This procedure explains how to filter out INFO level syslog messages from ESXi hosts. This significantly reduces log volume before forwarding them to the Cyrebro platform, preventing log noise and potential threshold issues.

Step 1. Connect to VMware ESXi CLI ("How to Connect to Vmware ESXi CLI")

Step 2. Check the current log level

vim-cmd hostsvc/advopt/view Config.HostAgent.log.level

EXAMPLE OUTPUT

(vim.option.OptionValue) [
   (vim.option.OptionValue) {
      key = "Config.HostAgent.log.level",
      value = "info"
   }
]

Step 3. Set the log level to warning

vim-cmd hostsvc/advopt/update Config.HostAgent.log.level string warning

Step 4. Verify that the change was applied

vim-cmd hostsvc/advopt/view Config.HostAgent.log.level

EXAMPLE OUTPUT

(vim.option.OptionValue) [
   (vim.option.OptionValue) {
      key = "Config.HostAgent.log.level",
      value = "warning"
   }
]

Step 5. Restart ESXi services to apply the changes

services.sh restart

This command will temporarily disconnect the host from vCenter and interrupt active management sessions. 
Virtual machines will not be affected.

Step 6. Check the logs after service restart

tail -f /var/run/log/hostd.log

If only warning or error entries appear (or no entries at all), the change was applied successfully. INFO level noise has been suppressed.