Log Insight VIDM SSO Authentication
Has anyone out there configured Log Insight 3.6.0 to authenticate to VIDM? I found the config file but I must not have populated something right so if anyone has successfully set this up please share...
View Articlelog insight install
i installed log insight but i have some error when it creat . What isproblem ? Error starting new deployment: java.net.UnknownHostException: VMware vRealize Log Insight: VMware vRealize Log Insight:...
View ArticleLog Insight Alarms
I have created a custom query based on the following filters:file path contains /var/log/desktonetext contains on port 389 Now this brings me multiple entries for different host names now what I want...
View ArticleCan old agents be removed from Log Insight console?
We have a number of agents listed in Log Insight that have long since ceased to exist which did not have the agent uninstalled before they went, and some that are listed multiple times with only one...
View ArticleForwarding to QRadar SIEM?
I am looking for some help with forwarding Log Insight security events to IBM QRadar.The Log Insight documentation indicates that within the SysLog data being forwarded there's a “_li_source_path” that...
View ArticleCan i use vCenter License for Log Insight 4 as 25 OSI (like 3.3)
Hello, For Log Insight 3.3 was the vCenter 6 License useable for 25 OSI(vRealize Log Insight for vCenter FAQ - VMware Cloud Management) Is this valid for LogInsight 4 too? best regrards,Mike
View ArticleMS Exchange content pack issues
I've installed the Microsoft Exchange content pack in Log Insight 2.5. We have Exchange 2012 and I've installed the Log Insight windows agent onto the Exchange servers. Additionally I added the...
View ArticleLog Insight config
I have some questions 1 - i have vsphere with operation manager enterprise plus 6 so if i use Log Insight for vcenter . is there any limitation for esxi or vm etc... 2- I have cisco switchs and emc vnx...
View ArticleCouple Questions
I've been delving into log insight recently and have a few questions: If I create an alert, how can I make that available for others on my team to access and edit? (I'm hoping that it isn't silo'd like...
View ArticlevRealize Log Insight - Unable to add content packs
Any content pack that I try to add to Log insight (appliance build latest version) gives me the following error at the top of the screen:"! Error Installing (Name of content pack) Content Pack"This...
View ArticlevRealize Log Insight add DNS IP address
I was wondering if anyone can provide instructions on how to add a DNS server IP address for vRealize Log Insight v3.3.1.
View ArticleRemove/delete log entries
I need to know if there is a way to search for certain logs, by the age of that log, and delete it. Reasoning is below. vRealize Log Insight is a good tool, but the one area where it fails...
View ArticleChange the OVA vCPU, RAM, and disk size
I was wondering if there was a way to change the OVA configuration (vCPU, RAM and disk) before or after deploying the vRealize Log Insight appliance, and still receive support from VMware? The default...
View ArticleData Distribution across cluster nodes
I have currently been testing LogInsight in a single node configuration. This server has approximately 1.5TB of event data. If I add 2 additional worker nodes to create an HA cluster: 1) Are all...
View ArticleFiltering forwarded events
Hi, Trying to help the SIEM team out by limiting the amount of logs being sent from the ESXi servers. We only really require security events to be sent to SIEM but I think there are two options here...
View Articleloginsight 4.0 authentication configuration
do anyone know how to config the Ldap configuration for log insight 4.0?
View Articlelogs
How many days I can keep logs ? I have vCenter 6 licenses and so not enterprise license. I made a standard log insight installation.What is the difference between HP Arcsight. This product is the best...
View ArticleHow well do the vRLI logs compress? Are they encrypted?
I am trying to get an idea as to how well vRLI logs will compress on our SAN. I know we can encrypt the logs in transit, but I don't think they are encrypted at rest. Additionally, I don't know what...
View ArticleCustom filters in data sets
Hi, Is there a way to create custom filters that can be applied in data sets? Specifically I want to create a filter for database name from SQL Server. I have already made a custom extracted field for...
View ArticleActive Directory auth not working
Hi,Wondering if someone can help? We recently added 2 nodes to our Log Insight 4.0 cluster, going from 3 to 5 nodes, and expanded disks on the initial nodes so they all matched. All nodes show green...
View Article