We recently upgraded to ESXi 5.0 U1 and are utilizing booting to USB. For this reason, we have chosen to have our logs redirected to a datastore on our SAN. My understanding was that all we needed to configure to do this is the setting for 'ScratchConfig.ConfiguredScratchLocation' under "Advanced Settings -> ScratchConfig".
I realized that there are still events being logged actively to the USB in /var/log/. From what I am reading, to stop this you need to configure 'Syslog.global.logDir' to point to a datastore also. I've done this, and cleared out all logs from the local /var/log/, and I don't see anything coming back there.
But, I have both of these settings configured to the same directory on our SAN. They have to be in different formats, but they both point to the same location. Is that OK to do? I'm assuming they are all the same logs so it should be OK, but I just wanted to verify with someone who knows about this first.