VMware ESX and ESXi
The EMC VMware DSM for IBM QRadar collects ESX and ESXi server events by using the VMware protocol or the syslog protocol.
When you use the VMware protocol, the EMC VMware DSM supports events from VMware ESX or ESXi 3.x, 4.x, 5.x and 6.x servers.
When you use the syslog protocol, the EMC VMware DSM supports events from VMware ESX or ESXi 3.x, 4.x, 5.x and 6.x and 7.x servers.
To collect VMware ESX or ESXi events, you can select one of the following event collection methods: