Clik here to view.
Issues upgrading to vRealize Log Insight 8.0
We've just updated VRLI in our lab environment from v4.8 to v8.0 but encountered a couple of issues along the way. Am documenting them here for the benefit of others and any input from VMware. Failure...
View ArticleClik here to view.
Cannot Upgrade after Upgrade Failure.">"Upgrade to 4.7.1-10752772 already in progress" -> Cannot Upgrade after...
Hello Community, i'm pretty new to the vRealize Log Insight. But one of my first tasks is to upgrade our instances. So i informed myself about upgrade paths and so on , everything is fine regarding...
View ArticleClik here to view.
log insight 8 with adapter connect to vcenter : not capture totale vcenter-log
helloi have log insight 8 connet to vcenter 6.0 and 6.7 and correct capture vcenter events.butbut not all vcenter events are captured example:if I create a folder inside the vcenter, this event appears...
View ArticleClik here to view.
vRLI Host file and Disk Space Utilization
Hello Experts, In our environment, vRLI nodes is at 97% disk utilization.I was going through VMWare documentation...
View ArticleClik here to view.
PAK for Office 365 or Azure AD logs?
Just wondering if anyone has built a PAK with some handy dashboard for Microsoft Office 365 and/or Azure AD security logs? While we don't use log insight as our SIEM tool, its becoming more import to...
View Articleloginsight cluster maintenance procedures
in a 3 node cluster, 1 master, 2 workers. If maintenance needs to be done to the master, any kind of maintenance, is there a way to transfer the master role to another worker and then remove the...
View ArticleClik here to view.
Filtering Noise
So we have been playing with our deployment, and getting a feel for it. It seems like there is a lot of noise present. We've been successfully using event_type filters to remove some of this. Is this...
View ArticleClik here to view.
Loginsight Firewalling/preventing rogue hosts from sending syslogs
I see loginsight will literally ingest anything from any ip as long as its sent to it. How can I prevent this happening, and only allow ingestion from a selected list of machines/ip addresses? Would I...
View ArticleClik here to view.
Can we pull the Storage VMotion or Storage DRS logs from VMware log insight ?
Hi All, I'm looking to pull the Storage VMotion or Storage DRS logs from VMware log insight to audit what cuased the storage exhausted. Any pointers will be much appreciated. Thanksvmk
View ArticleClik here to view.
Log Insight Extension for Arista
Hi All, I am working on configuring the Arista monitoring in Log Insight and Arista Log Insight extension needs to be installed on switches to fully leverage the content pack for Arista as per the...
View ArticleClik here to view.
Can't install VMware - vSphere 8.0 Content Pack...
Hi, I just took a look on the Content Pack Marketplace of our Log Insight environment. It mentioned 4 updates available, so I upgraded the VMware NSX vsphere, VMware -vSAN and VMware vRops 6.7+ content...
View ArticleClik here to view.
Use provided timestamp as event time
Hello, I'm sending logs to logInsight and want the event time to use the provided timestamp.Example :timestamp=22-01-2020 15:12:53;template=;dataid=StoreHeader:storeId:11708timestamp=22-01-2020...
View ArticleClik here to view.
Log insight with vRealize Automation business groups or tenant
Hello,we use vRealize Automation with business group as a multi-tenancy environment, we want bg's users to only access their logs on the LogInsight appliance. Can anyone point me to the correct...
View ArticleLog Insight and AD authentication
Hi, From mars 2020 MS will change their default settings in AD when it comes to AD authentication with simple binding and ldap signing.As of today our log insight system uses either simple binding or...
View ArticleClik here to view.
loginsight configure SSO authentication with VMWare Identity Mgr is not working
We are trying to configure SSO authentication with VMWare Identity Mgr. We are getting incorrect username and password error but we are sure that username and password is correct as we tried it...
View ArticleClik here to view.
Login events in Log Insight with RBAC
Hi, I need to create a multi tenancy vRA environment and I am requested to set up RBAC in Log Insight to give access to tenant admins to relevant logs.I installed and configured vRA 7.5+ Content Pack...
View ArticleVMWare Essentials Plus + VMWare Insight 25-OSI
Hi! I have a vmware vcenter essentials plus license, I want to deploy vmware Insight. I've read that I dont need to purchase a license for the Insight if I need below 25-OSI, but I've tried to add the...
View ArticleClik here to view.
Log Insight REST API
Author : URL : http:////docs.vmware.com/en/vRealize-Log-Insight/4.8/com.vmware.log-insight.developer.doc/GUID-E09A86E6-813C-48D3-B322-8F3B00609AD3.htmlTopic Name : The vRealize Log Insight REST...
View ArticleClik here to view.
vRealize Log Insight 8 very slow
We have a six node Log Insight 8 cluster. with 6 nodes. All the nodes are configured as large and the ingestion rate is below 15,000 which is what is ok for these nodesI have also ran some checks on...
View ArticleClik here to view.
Parsing JSON in Log Insight
Following guidance and using example log data from VMWare, the test data is being parsed into separate events seemingly based on line breaks in the data. Only when I wipe the line breaks does it parse...
View ArticleCentos 6.1 with linux content pack
HI;iv install lunix content pack on CEntos 6.1 .i know its not fully supported but i read a lot of threads that people have installed and succeeded.so i ran the bin package1058 chmod +x...
View ArticleLoginsight agent well installed, good comunication, but not showed at vRLI Panel
Hi all!! In one of my vm with SO: Red Hat Enterprise Linux 7 (64-bit), I have installed correctly the vrli agent, and checked in the log, the comunication is right, but if I go to me vrli Panel, this...
View ArticleClik here to view.
Send Alerts from vRops to vRealize Log Insight
Hi,I Was wondering if it's possible to send alerts the other way around instead of doing from vrli to vrops but have some alerts from vrops sent to vrli,I'm looking for some way to configure an...
View ArticleClik here to view.
Problem with Loginsight Content Pack Markplace access
Starting from some days ago I'm not able to access the Content Pack Marketplace from vRealize Log Insight.I just get a circle spinning in the middle of the screen just like it was trying to download...
View ArticleClik here to view.
Host List - Configuration
Hi All, I've inherited Log Insight from someone else and am looking at the configuration of it, we are using version 8.0 I've a question around the list of hosts .... Administration -> Management...
View ArticleClik here to view.
vCenter collection failed alerts post-upgrade to vRLI 8l1
Since updating to vRealize Log Insight v8.1 from v8.0 I'm seeing a daily "vCenter collection failed" alert. The vCenter Server in question is running v7.0 GA (VCSA), and despite the error, data is...
View ArticleClik here to view.
Is there a way to include the Host IP (Source IP or Hostname) in the Log...
Hi Chaps,I setup an alert to notify me via email whenever an RDP event log is created.This alert is working though what I am figuring out now is how to include the exact Source IP of that RDP...
View ArticleClik here to view.
Filter failed tasks
Hello,I am triyng to filter the tasks that failed in vcenter (powering on a vm for example) but I can't see the status of the tasks in loginsight, for example in Vcenter on a powering on virtual...
View ArticleClik here to view.
Disk Cache setting is absent
Author : URL : http:////docs.vmware.com/en/vRealize-Log-Insight/8.1/com.vmware.log-insight.administration.doc/GUID-956EC67B-44B4-44BB-AF24-0DE4377F725C.htmlTopic Name : Add a vRealize Log Insight Event...
View ArticleClik here to view.
Unable to export the logs from Log insight in raw or csv format
I was unable to extract all the event logs from log insight 4.6.2 due to limitation of log Export to 20,000 results. I wrongly applied the solution mentioned in KB article "VMware Knowledge Base "....
View ArticleNeed to reset log insight admin Password
Hi, I want to reset the admin password in vrealize log insight. Our current version is 4.6. Can body help me on this to reset the password.
View ArticleClik here to view.
log insight 4.8 - have 90 vSphere agents all using same username. Any way to...
log insight 4.8 - have 90 vSphere agents all using same username. Any way to update password on all of them instead of individually?
View ArticleClik here to view.
vRealize Log Insight 8.0.1 and AD nested groups
Hi all, I have a problem with authentication of users in nested AD groups, because they are not able to login with group-based roles.Logon is however possible if the same users are directly configured...
View ArticleClik here to view.
Advice needed for correct Log Insight 'VMware - SRM 8.1+' setup for Photon...
While I have successfully deployed the LIagents to the SRM photon appliances themselves, and can collect syslogs from each side, I am stuck with how to correctly configure directories for 'SRM_logs',...
View ArticleClik here to view.
Log Insights - Agents - Parser RegExp
Hi, I am a newbie to LOG INSIGHTS and did good in figuring out with the help of this community and online documentations. However, I am stuck with Regexp and because of that I am not able to retrieve...
View ArticleClik here to view.
Log Insight Agent - Collect Windows Events with Specific Text
I have been using the Agent Configuration to collect specific Windows EventIDs as in the example below which works fine. In this example, the agent is collecting AppLocker events with ID of 8004....
View ArticleIs there a loginsight dashboard to view IOPS?
I'm trying to find a dashboard that can identify high utilization SCSI IOPS, particularly to bench mark what IOPs are and if there would any benefit using PVSCSI. Thanks,Tom
View ArticleClik here to view.
Gateway Missing on Log Insight Upgrade
I performed an upgrade of Log Insight 4.8 to 8.0. All went well except there was no network connectivity. I tracked that down to a missing gateway. Then I ran into another problem. How do you edit...
View Article(user) dashboard export
Hi there, I've searched for a while now, but wasn't successful. Is there any way to export the query and chart config for dashboards? Ideally for shared and user-only dashboards?
View ArticleClik here to view.
VRLI integrating with active directory where LdapEnforceChannelBinding = 2
Hi, in an ongoing support request I got the answer that vRealize Loginsight (VRLi) can not be integrated with an Active Directory with the following secure settings (specifically with the last one):...
View ArticleClik here to view.
Hung on Checking for dependencies when trying to remove a content pack
Has anyone run into this? I went to uninstall a content pack and it pops up the usual Checking for dependencies, but just hangs on that popup.I was on 8.0 and tried upgrading to 8.1 then 8.1.1 and it...
View ArticleClik here to view.
filezilla phrase logs
HI All ,looking to add Filezilla log to lognisighti already installed an agent and made a new template to the server with config of [filelog|FTP_ZILLA]directory=C:\Program Files (x86)\FileZilla...
View ArticleClik here to view.
Disconnected Syslog Hosts and Agents in vRLI
Hi Team, Just wanted to confirm on how we can delete disconnected syslog hosts and agents from vRLI UI. The syslog hosts and agents were reporting properly and if we decommission the source machines...
View ArticleClik here to view.
After vRLI upgrade from 4.8 to 8.1.1, ESX hosts appearing "as vCenters" in...
Prior to upgrade, vCenter Servers integrated count reflected correct number of vCenters - 97. After upgrade, Administration / Integration / vSphere - completed validation for each of the 97 vCenters...
View ArticleClik here to view.
Mixing CPU and OSI licenses in one Log insight enviroment
Hi. We have an log insight enviroment installed that has an vrealize suite (Full) licens, that displays OSI Unlimited and CPU Unlimited. The license came with our Enterprise plus vsphere license. This...
View ArticleClik here to view.
Re-download vRealize Log Insight - Trial Expired
Hi, Looks like a while ago I downloaded it but do not have the OVF so I need to download again but am getting Your evaluation has expired. I do have a license via VMUG for lab purposes so just need to...
View ArticleClik here to view.
Loginsight upgraded to 8.1.1 but after reboot shows as 4.8
Really weird one - I upgraded from 4.6 to 4.7 to 4.8 then to 8.11. After the upgrade 8.11 was displaying fine and I could see data and the marketplace. It was running as 8.11 as I remember looking at...
View ArticleClik here to view.
Windows logs forwarding with Syslog
We are forwarding Windows logs to Log Insight and then sending them on to one of our components that is using Vector.dev. The issue we are having is that the Windows logs are being sent out of Log...
View ArticleClik here to view.
Blast Extreme Horizon Content Pack?
I was amused to see there is no Blast support in the current Horizon Content Pack. And I suppose there gonna be no such pack anymore?
View ArticleClik here to view.
vRealize Log Insight licensing
Hello all I have a NSX-T 3.0 Advanced license key, it is my understanding I can license Log Insight with the NSX-T key. What limitations/restrictions would beimposed on the Log Insight deployment if I...
View Article