Overview In a previous article I covered implementing VMware Webhook Shims functionality using the source on https://github.com/vmw-loginsight/webhook-shims. As I previously stated, this is not officially maintained so it's a "use at your own risk" scenario. I was recently contacted by a customer asking how they would go about leveraging a single webhook shims server with … Continue reading Log Insight – Configuring Webhooks Re-Visited
vRealize Log Insight
Log Insight – Configuring Webhooks
A few years ago an internal side project within VMware generated a mechanism to trigger calls to other VMware and 3rd party products from vRealize Log Insight and vRealize Operations that were not natively supported within either product. This was known as Webhook Shims and still exists to this day on Github (https://github.com/vmw-loginsight/webhook-shims). Recently one … Continue reading Log Insight – Configuring Webhooks
Log Insight – Bi-Directional Event Forwarding
This scenario has come up a couple of times with customers I have been working with and it is centered around the following situation/question . I have deployed 2 Log Insight platforms, one for each of my datacenters (assume one vCenter per DC). How do I get all the events in both Log Insight clusters … Continue reading Log Insight – Bi-Directional Event Forwarding
Log Insight – Authentication Case Sensitivity
This is an interesting problem I encountered last week with an environment configured with native AD authentication within Log Insight. The version was 4.6.1 but the same behaviour can be found in version 4.7. Adding domain users to Log Insight directly via the native authentication enabled the domain user to log into Log Insight without … Continue reading Log Insight – Authentication Case Sensitivity
Log Insight – Upgrading to 4.7
Upgrading to Log Insight 4.7 is a relatively straight forward process and is done by the application of a new pak file, downloadable from downloads.vmware.com or by leveraging vRealize Suite Lifecycle Manager (version 2.0 if going this route). In this blog I will be going from version 4.6.1 to 4.7. Before attempting any upgrade, the … Continue reading Log Insight – Upgrading to 4.7
Log Insight – Replacing SSL Certificates
The following process has been illustrated using Log Insight version 4.6.1 however it is also the same for version 4.7. Log Insight comes configured out of the box with a self-signed certificate that is generated during the installation. For some customers this is fine however there normally comes a point when either the certificate expires … Continue reading Log Insight – Replacing SSL Certificates
Scaling Log Insight
vRLI can be deployed in a variety of configurations but in its most basic form it is just a single virtual appliance. This limits the number of supported agent connections, events per second, event storage capacity and overall system performance. In fact all deployment types have limitations, those limitations just have higher values as more … Continue reading Scaling Log Insight
Log Insight – Analysis for Additional Products
vRLI 4.6 comes pre-installed with the capability to analyse core VMware products/components including vSphere, VSAN and vROPs. Customers will require the ability to examine logs from other products that may or may not be VMware related and expect the same integrated experience when using filters, graphs and searching data. To facilitate this, product content packs … Continue reading Log Insight – Analysis for Additional Products
Log Insight Alerting (with vROPs)
One of the nice things you can do with vRLI and vROPs is to pass information and events between the two, using data in one to trigger an action in the other. For example, lets assume that we have detected an undesirable situation with one of our ESXi hosts that shows up as specific log … Continue reading Log Insight Alerting (with vROPs)
Log Insight – Event Filtering
Now that your vRLI install is up and running and you are receiving logging data, it's time to start looking at the data and seeing how it can be used, filtered and searched. vRLI has 2 methods of looking at data. The first is by leveraging dashboards, either with pre-created content pack dashboards or by … Continue reading Log Insight – Event Filtering
vnuggets 