I noticed that some of the built-in vSphere Log Insight 4.x dashboard queries, for example, the VM Snapshots dashboard, don't seem to work correctly (or perhaps I'm not doing something correctly). The ESXi hosts are 5.5 and 6.0 hosts. For instance - If I open the "VM snapshots created" report, I see that it is filtering on "vmw_esxi_snapshot_operation" contains "create". But that does not bring up any snapshot related ...more »
Why is it that the Log Insight 4.x documentation recommends using a VCSA agent over the syslog forwarding for 6.0? Example: "For earlier versions of vSphere, while the vCenter Server Appliance does contain a syslog daemon that could be used to route logs, the preferred method is to install a vRealize Log Insight agent." Was going to setup the VCSA syslog forwarding as detailed in the following blog post: http://www.virtuallyghetto.com/2015/03/a-preview-of-native-syslog-support-in-vcsa-6-0.html ...more »
Integrate Log Insight's authentication with vCenter's PSC. vROPs has a great integration with the PSC which can be used as a model.
Currently we must statically add AD DC as a source which will eventually change and then AD authentication will be lost until manually re-configured.
Do we have a way to import data from SQL/Oracle (From tabels in DB)? Got a customer who needs this - Large Telco
Is it possible now or will it be possible in the short term to use the agent group name as an installation parameter for the Windows and Linux agent so it automatically gets the right config after installation without requiring administrative intervention?
I have a scenario where my environment is highly restricted behind a firewall. Due to license restrictions I am very limited to what ports I am allowed to allow through the firewall. I would like to be able to change the port that is used for the ingestion API which appears to be limited to port 9543. It would also be nice to change between TCP and UDP if possible.
Please see the attached screendump. The trend chart is showing a downwards trend. When I hover the mouse over the icon it shows that there is not difference in past and present trend/the trend is so small that there is little to no difference in the trend.
This is misleading in the sense that the trend is almost non existing
Query lists can get quite large with dozens or hundreds of items inside. Allow the user to sort the query list by result. E.g. if a query returns "Has Results" show them on top. This makes it easier to focus on the relevant results. In addition the title bar of a query list shall display the amount of queries. Once the user has executed them (green play button), also display the amount of queries with "Has Results". ...more »
Back in May of 2015, Carlos Sen of VMware published a video (https://www.youtube.com/watch?v=EHcT4xDyONc) on using vRLI to audit for license compliance using a License Compliance content pack. He provided no information on this nor was it linked to from the video, and I cannot find this in the Solution Exchange or anywhere else. Does this exist publicly, or something similar?
Trying to get log insight to grab the C:\ProgramData\VMware\VDM\logs\pcoip_server_2017_04_24_0000111c.txt file so that we can draw a line from a VDI session to a human on the other end of a zero client (we are a school district - kids are abusive on the equipment) There is a handy line in this file that tells me the IP of the zero client (man DNS resolution would be nice) but I can work with this because I have my DHCP ...more »
When using the API to perform a query, we are unable to use extracted fields are constraints when defining the query.
NOTE: Although the query returns extracted fields, it does not accept extracted fields.
I had a previous request about this, and the response was to just change URL /home to get around it.
Well in the New Version 4.3 i removed a content pack, and got same problem, but now /home Returns me to the full url With the content pack that fails. There must be a way to check if the content pack exists, and if not redirect you to my Dashboard.