For many NSX components you can easily configure a syslog server, such as vRealize Log Insight. This however is not simple and straightforward for the NSX Controller Nodes. For those components this setting has to be configured via the NSX API via HTTP REST. In this article I explain how to use vRealize Orchestrator to accomplish this task.
The syntax and procedure are described in two locations: