Syslog or ‘System Logging Protocol’ is used by routers, switches, access points, servers and of course Nutanix. It is used to send events and logs to a remote syslog server that collects, organizes and filters these logs. 

In Nutanix, we provide different log modules for the core services that can be enabled separately and you can configure the logging level required for them as well. For example, if you wish to forward just the warning log messages for Acropolis, this would be the command:

ncli rsyslog-config add-module server-name=<server_name> module-name=ACROPOLIS level=WARNING

For a more comprehensive look at the various modules and log levels, check out syslog server.

Bonus: Would you like to know who powered off that VM while you were sleeping? 

Or in general, WHO did WHAT on WHICH OBJECT, at what TIME, from WHERE, and what was the OUTCOME?

You can forward these Audit logs to your syslog server as well from Prism Central. More information on this can be found here.