General Log Insight Q&A

Have a small secure downloader

Have a small download, less than 50MB, which then downloads the OVA/OVF in a reliable, restartable fashion.

Submitted by (@broth0)
Add your comment

Voting

-3 votes

Feature Requests

Content pack KB article included in search results

I love that the 1.5 version includes related kb articles in the notes section of each query in the content pack. I'd like to see this taken further. Add a link to the KB each log result from a search.

Submitted by (@calebcordes)
2 comments

Voting

18 votes

Feature Requests

Variable retention periods

Hello,

 

In our environment we have different needs for log retention. For example my vsphere logs can be aged after a month while my firewall logging should never be deleted.

 

so i would like to have a retention option per host or something.

 

Regards

Submitted by (@hans.de.jongh)
13 comments

Voting

67 votes

Feature Requests

Stats to vcenter operations manager.

When troubleshooting vCenter Log Insight performance, it would be helpful if it could send statistics to vcenter operations manager.

Submitted by (@styrup)
Add your comment

Voting

5 votes

Interactive Exploration

Ability to adjust column width in field table view

Maximize effectiveness of displayed data: Allow to adjust column width in field table view

Submitted by (@ray.olander)
2 comments

Voting

4 votes

Content Packs

Avamar Content Pack

Community content pack done by: http://velemental.com/2013/08/22/emc-avamar-with-vcenter-log-insight/

 

The Content Pack can be downloaded from here: http://velemental.com/?attachment_id=1200

Submitted by (@steveflanders)
2 comments

Voting

2 votes

Feature Requests

Datatype-aware field extraction

Sometimes log messages contain embedded data with a fixed standard format, like XML, JSON or CSV, either when logging about configuration/state information or when the messages aren't really logs. Attempting to parse out any of these formats with regular expressions is difficult (and in the case of XML, strongly discouraged), especially when the structure includes nesting, lists or esoteric quoting/escaping rules. For ...more »

Submitted by (@acastonguayvmware.com1)
Add your comment

Voting

7 votes

Content Packs

Weather content pack

Analyzing the weather with Log Insight: http://sflanders.net/2013/11/18/analyzing-weather-log-insight/

Submitted by (@steveflanders)
Add your comment

Voting

3 votes

Interactive Exploration

Allow user-specified # of lines to be displayed on IA

Allow user-specified # of lines to display on screen (rather than forcing 50 as a limit).

Submitted by (@steveflanders)
1 comment

Voting

2 votes

Feature Requests

Drop specific incoming messages

An administrator may deem some messages undesirable, either specific logs produced by a source or a whole source. Such messages may result in CPU/disk resources being expended unnecessarily. Undesired log messages may result in Log Insight's data store being rotated more quickly than desired. In terms of licensing, one may wish to drop log messages from unlicensed sources, restricting sources from which log messages are ...more »

Submitted by (@acastonguayvmware.com1)
11 comments

Voting

34 votes

General Log Insight Q&A

Help with Solaris 10 syslog

Has anyone had any luck with getting a Solaris 10 server to send syslog into LogInsight?

 

I've tried:

 

*.debug @IPADDRESS

 

and other variations in the /etc/syslog.conf

 

Then restarting or refreshing via:

 

svcadm refresh svc:/system/system-log:default

 

svcadm restart system/system-log

 

But nothing seems to work. Any thought/help would be great.

Submitted by (@erikkringlie)
5 comments

Voting

0 votes

Feature Requests

Deduplication of Data

I was wondering if you guys could make the data be zipped/dedupped during the night? If it already does dedup or something I guess its fine but it would seem that log insight takes a lot more space then our other logging system. We are trying to move everything to log insight but space constraints don't seem to be matching up.

Submitted by (@jacob.curran)
4 comments

Voting

20 votes