# For ESXi syslog Monitoring:
<source>
  @type syslog
  port 1514
  bind 0.0.0.0
  protocol_type tcp
  format none
  tag system.esxi
</source>

<filter system.esxi.**>
  @type grep

  <exclude>
    key message
    pattern (iscsid|LikewiseGetDomainJoinInfo|hostd|DictionaryLoad|addVob|backup\.sh|libsmart|\[context\]|Hostd|vmauthd|Rhttpproxy|requested fast path state update| above TEMPERATURE threshold)
  </exclude>
</filter>

<match system.esxi.**.{debug,info}>
  @type null
</match>

<match system.esxi.**.{notice,warn,err,crit,alert,emerg}>
  @type copy

  <store>
    @type file
    path /tmp/syslog_esxi.log
    time_slice_format %Y%m%d
    time_slice_wait 1m
  </store>

  <store>
    @type relabel
    @label @danger
  </store>
</match>