If you configured the ESXi host(s) in question to send remote syslog to Log Insight after the PSOD occurred then this would be expected behavior. Configuring any device to send remote syslog applies only to events that occur after the configuration has been put in place. The next time the event occurs you should be able to search for it in Log Insight (you could even create a dashboard or configure an alert beforehand). Log messages would only be dropped in the case of network connectivity issues or hitting some maximum on the remote syslog target. In terms of ESXi the only thing to keep in mind is the remote syslog bug. I hope this helps!
↧