VMware have created Log Insight to help customers solve problems faster, Find Problems you didn’t know you had and get actionable insight into what the messages mean.
This series of articles are going to cover the deployment of VMware’s Log Insight Manager infrastructure, configuration of Load Balancing using “KEMP” and configuring VMware’s ESXI Hosts to Send logs to Log Insight.
VMware vCenter Log Insight is a analytics product released last year. Log Insight delivers automated management through analytics, aggregation, and search.
- Log Insight Can analyse any unstructured time-series data, Configuration etc.
- It automatically identifies structures in the data
- No Need for Databases
- Central, Scale-out store for all collected logs, SQL is not used.
- Configurable retention and archiving
- Maintenance free
Best for vSphere
- Queries, alerts, fields, charts in the vSphere Content pack
Scale Out Architecture
The new 2.0 version of Log Insight brings the following enhancements and features:
- 8x faster data collection
- 2TB of live data (searchable) per node
- High Availability removing a single point of failure for Log ingestion
- Load balancing Log Insight using a third party Load Balancer like “KEMP”
- Single User interface for a central management interface
- Windows OS Support
Log Insight supports ingestion and receipt of Syslog messages that are sent over UDP, TCP, TCP with SSL encryption and via API. We will cover this in more detail later on in the series.
for more information on the features please see the following link:
Deploying Log Insight 2.0
The first step would be to download the Log Insight appliance from VMware.
Once you have imported the OVF and added the basic Configuration (IP address,
Gateway etc), you will then be able to browse to the web portal as shown in the “Welcome to vCenter Log Insight” Screenshot.
If you have DHCP, then the IP address settings will be done for you as per the screenshot above.
follow the instructions as guided.
Select “Start New Deployment ”
Enter in the Admin Details as shown in the Screenshot
Configure Time, SNMP, and SMTP.
We are now ready to move on to adding Worker Nodes.