The following are settings you can modify:
View and change the log levels for all services on any number of appliances in the cluster.
Send syslog data to the same SIEM platform.
To configure the logging settings for managed appliances
In CMS, Management Server > Configure > Central Management, under Authentication Servers section, ensure Appliances share the same authentication servers is selected.
Navigate to Management Server > Monitoring > Logging.
Select the Managed Appliance tab.
Click on All appliances to adjust logging levels for all appliances or click on specific appliance.
or
Flush log messages immediately
or
Collect system health information.
Click OK.