LI agents occasionally stop, how to be alerted?
we have 4.3, wondering how to be alerted when LI agents (especially vRA) stop after X amount of minutes. The status is displayed within the UI, how to 'setup an alert'? Steve
View Articlewhat does some log insight means
Dear allHi there are some event logs in log insight that could not understand that means can you help me please? 1 - 2017-05-18T04:46:35.065Z BAK-ESX5.opr.dsaVpxa: verbose vpxa[225F9B70]...
View Articlehow to launch an action when raising a log insight alert
Hi, Is there a way to launch an action when an alert is raised in log insight ? Can the alert be send to f.e. orchestrator to execute a shell script on an esx server ?Or is there any other integration...
View ArticleWorking with PowerShell Transcript Log Files
Hallo, has anyone tried to properly collect PowerShell Transcript Log Files?Default is that each Line is a New Event, that does no work properly in case of errors and multi Line Messages. I also tried...
View ArticleActive Directory lockout email alerts showing 999
Hello,I've tried searching the forums but could not find this specific issue mentioned. I've been using LogInsight to email me AD lockouts for the past year or so. It's been working well until...
View ArticlevROPS logs are not being collected in loginsight . Even after configuring...
Have integrated vrops 6.5 with Loginsight 4.3 version. Integration is successful. From vrops am able to go to the loginsight to check any object logs. But Am not able view any logs for the vrops itself...
View Articletimestamp field is not significant for vRealize REST Api.
In vRealize Log Insight REST Api, while quering the data with the url: https://localhost/api/v1/events/timestamp/>1497530830, i expect only events later than time 1497530830, but the url actually...
View ArticleActive Directory integration deprecated in Log Insight 4.5+
Hi All, As you might know, Active Directory integration has been deprecated in Log Insight 4.5+ - VMware vRealize Log Insight 4.5 Release Notes. I was wondering if VMware had any plans to add support...
View Articleduplicate host entry for VCSA
After Migration of vCenter Server (Windows) to VCSA (Appliance), I do see the VCSA twice in Log Insight under hosts. 1. hostname (vcsa)2. fqdn (vcsa.domain.local) any idea why is this? both entries can...
View ArticleJuniper content pack hangs web browser
Hi, Whenever we use the Juniper content pack dashboards, the web browser hangs completely. Any one else experience this and have a solution? We have tried multiple computers and web browsers. We talked...
View ArticleRemove text from extracted value in a Field
Hi, Is it possible to remove text from within an extracted value. Probably best to give an example of what I am trying to do:- Cisco ACS logs have the commands which are run on devices. e.g. CmdSet=[...
View ArticleLog Insight User login
I have configured an AD Group with appropriate rights and configured AD integration. For most users, the they can login, logout, login, no issues.... However, for one user, he can only login once....
View ArticleLog Insight 4.0 agent for Windows does not stay connected on port 9543
I have been trying to upgrade agents to v4.0 which by default uses cfapi over SSL on port 9543. If I install the agent this way on DMZ agents they do not stay connected to Log Insight. If I start the...
View ArticleIs it possible to enable Log Insight alerts over a specific period?
Hello All, This is my first post in the community and hope it fits to the community terms of use (I try my best).I would like to know if it possible to enable the log insight alerts over a specific...
View ArticleForwarder do not preserve source field
Hi All, I have loginisght 4.3.0-5084751 installed. I have two loginsight forwarders installed in two diffent location, which forward the logs to central cluster of loginsight servers. The issue is the...
View ArticleLog Insight 4.3 error
One of the Windows agent is crashing and won't start and continuously retry and created log file (currently over 200k log files created....) 1. What would be causing the following error? 2017-07-12...
View ArticleBuild query/alert help: No logs received from given hosts/agents
I'm struggling to figure out a way to build this as a query and subsequently as an alert. My previous post is involved in this issue. The problem I'm trying to address here is when a host or hosts stop...
View ArticleAlerts to vROps are not associated with correct object
Versions involved are vRLI 4.5 and vROps 6.6. The vRLI agent is installed on a VM which is being monitored by vROps. Integrations are configured between the two products. One can view the logs of the...
View ArticleAbility to export/import alerts in Log Insight
I see there is the ability to export alert definitions to a CSV file, but I don't see where there is the ability to import them. I'm looking to copy and keep a consistent set of alerts across all Log...
View ArticleExtracted Field not working as expected
I have created and extracted field as in the attachment, its to extract the username which was locked out. Its working correctly, as in the dark green section is correct and the lighter green covers...
View Article