Clik here to view.
Configuring vIDM via API
I've been working through creating workflows of what I'm going to call "routine configurations" that a person does when standing up a new Log Insight instance/cluster, but when I try and go and create...
View ArticleClik here to view.
Why aren't Alerts recognizing a 'Last Hit'
I have created an alert in Log Insight that is supposed to detect when a Windows Event ID 4740 (account lockout) is recorded. The query has a filter set to eventid=4740. The alert is set to notify 'On...
View ArticleClik here to view.
Alert for last received event
I want to create an alert to let me know when the last received event from a host exceeds 24 hours. I can see this information under the Administration -> Management -> Hosts view, but I would...
View ArticleFilelog evtx to Loginsight Server
Hello EveryoneI have a little problem.I want to forward evtx logs to my Loginsight Server.The logs are stored on a networkdrive.I temporary copied the log to a local path (Which the Loginsight agent is...
View ArticleClik here to view.
[4.5] - Log Insight changing HOSTNAME
YEP Community NewBie question on Log Insight...... After the initial config it's possible to change the HOSTNAME of the appliance ? We have try to change that in : /etc/hosts&/etc/hostname the cmd...
View Articlecontent pack alerts are not reflecting in to useralerts
Hello Team, I am using log insight 4.5.1 and i have imported vsphere/nsx/vsan/vrops content packs , But i am not able to see all of the predefined content pack alerts in user alerts.I can add...
View ArticleClik here to view.
NetApp ONTAP 9.x to Log Insight?!
Hi, as there is no more content pack available I was wondering if anyone has successfully setup forwarding syslog messages from NetApp to Log Insight?Are you happy with the built-in filtering...
View ArticleCreate an Alert for every event in VRLI
I have created a user alert for every vmotion event. I would like to send an alert every time a VM is vmotioned ( to an auditing system) but it seems the best i can do is every 1 min. is there a way to...
View ArticleCan you tell me how can i check the AD account lockout events in Log Insight
Hello,Can you tell me how can i check the AD account lockout events in Log Insight.Thank you
View ArticleClik here to view.
access log not parsing time
I have tried a few combinations of formats/parsers to get the date and time fields combined and show up in LogInsight as the timestamp field. All the other fields work and the timestamp field...
View ArticleClik here to view.
vRA Content Pack Field
Can anyone speak to where this field comes from? "vmw_vra_cat_item_name" I've loaded up the vRA 7.3 content pack and some queries require it yet I've found no instance of it in my logs. Thanks in...
View ArticleWrong vmw_ fields value on linux liagent logs
I've installed my first LI Agent on linux yesterday to get data from our qmail and pound log to be able to query them in a simpler way.I saw that on imported log I have various vmw_ fields...
View ArticleClik here to view.
Getting Historical Data from vCenters via vRealize Log Insight
Good afternoon family: I'm not new to this wonderful forum, but I am with a new organization. It's wonderful because they actually get it!! VMware is a must-have tool and its many products help to...
View ArticleClik here to view.
Log insight search result csv export
Hi, I'm using vRealise Log Insight version 4.5.1 I need to export the search result of interactive analysis to csv file. The default csv delimiter is a comma ",". I'm wondering if it's possible to...
View ArticleClik here to view.
User alert assistance
Hello team, I am new to loginsight and have configured specific user alerts however I was wondering whether it was possible to exclude the email alerts for particular timeframes. i.e. on a schedule....
View ArticleClik here to view.
iDRAC Issues
I've setup a few iDRAC's to log to a new Log Insight instance - the issue I'm having is that although all hosts are setup the exact same way there are some that are not logging to Log insight. Even...
View ArticleClik here to view.
Guest operation authentication failed for operation List Processes ----- What...
Good morning all: I've been a long time fan of vRealize Log Insight. I finally got a position with a company that recognizes the value and we've been running a test (eval) for pre-implementation....
View ArticleClik here to view.
Clik here to view.
Log Insight Agent directory monitoring
Can the LI Agent for windows be set up to monitor and recurse a directory?I have a case where the log files are organized in subdirectories. Each subdirectory name is not predictable since the name is...
View ArticleClik here to view.
Log Insight not receiving data from Nexus switches
I am running into an issue where my Nexus 5672 switches are not logging into the Log Insight server as their syslog. I have other devices going there, esxi hosts, vCenter, NSX Manager, even TACACs -...
View Article