so I setup my esxi5 nodes to send their logs to a remote syslog server (not a VMA).
It works well with the exception of one thing
lets say my esxi host is called esx1
After I set it up and go to the syslog server where it places the syslogs.
I see the following:
du -sh *
40k esx1
20M esx1.mydomain.com
not quite sure why it is doing that but both have valid info in it, one just way more than the other...