Campaign: Feature Requests

Variable retention periods

Hello,

 

In our environment we have different needs for log retention. For example my vsphere logs can be aged after a month while my firewall logging should never be deleted.

 

so i would like to have a retention option per host or something.

 

Regards

Submitted by

Type : New Feature

Voting

64 votes

Campaign: Feature Requests

Enhancement: Export Raw Events

Provide the ability to dump raw events more than 20K at a time. The user should have the ability to run an export query and retrieve the results. (eg. User provides a date range and requisite filters.)

Submitted by

Type : Enhancement

Voting

53 votes

Campaign: Feature Requests

Alert when log source is not sending logs

Currently there is no alerting when Log Insight Master or Worker is not receiving logs/API events from its workers or agents. Part of the PCI compliance requires notification when a stoppage of logs is detected.

 

If this could be an alarm, or an automated email that is sent out, and have the ability to set certain thresholds (no logs within 30 minutes, 60 minutes, 3 hours, etc), that would be great.

Submitted by

Type : New Feature

Voting

49 votes

Campaign: Feature Requests

Need true reporting capabilities in Log Insight

Dashboards make it possible to view data visually over time and alerts make it possible to get notified about events seen in the environment. What is needed is true reporting and more specifically: * Scheduling of when to run reports (both time of day and frequency) * Ability to at least email reports (pdf, html, and csv should be supported at a minimum) * Ability to include dashboards in reports (including legends) ...more »

Submitted by

Type : New Feature

Voting

46 votes

Campaign: Feature Requests

Send and Receive SNMP traps

Allow for the reception and logging to SNMP traps; also allow for sending SNMP traps as alerts. All configuration should be in the UI.

Submitted by

Type : New Feature

Voting

46 votes

Campaign: Feature Requests

Drop specific incoming messages

An administrator may deem some messages undesirable, either specific logs produced by a source or a whole source. Such messages may result in CPU/disk resources being expended unnecessarily. Undesired log messages may result in Log Insight's data store being rotated more quickly than desired. In terms of licensing, one may wish to drop log messages from unlicensed sources, restricting sources from which log messages are ...more »

Submitted by

Type : New Feature

Voting

32 votes

Campaign: Feature Requests

Transaction support

Log Insight should facilitate understanding transactional flows, where a group of log messages tell a story together. The transaction identifier should be definable in content packs and by users, similar to an extracted field. For example: - vCenter, vpxa and hostd tasks are identified by an opID, relating task Start, Finish and subtasks within. - ESXi vMotion tasks are identified by an MigID, relating Source and Destination ...more »

Submitted by

Type : New Feature

Voting

27 votes

Campaign: Feature Requests

Support globs for filelog directory option in Windows Agent

The agent should support globs (asterisk and wildcard) for folders. THe use case is IIS where multiple domains exist on the same server. Something like this

 

directory= E:\sitecoredata\*\Data\logs

include=log*.txt

So then I could make one that does them all type thing.

 

Globs are supported for files so this is an inconsistency in the product as well.

Submitted by

Type : Enhancement

Voting

26 votes

Campaign: Feature Requests

Log Insight Dashboards in vRealize Operations Manager

I would like to integrate LI dashboards (in presentation mode) or particular widgets in vR Ops dashboards. They should be able to interact (Object / parent / child selection) and do not require additional authentication.

Submitted by

Type : Enhancement

Voting

24 votes

Campaign: Feature Requests

Centrally update Agents from Log Insight

When I update Log Insight (f.eks. to the new 2.5 TP) I would love to just go to the "Management\Agents" view and choose "Update all agents" or similar.

 

I prefer self-contained solutions (like updating VMware Tools) instead of having to rely on 3'rd party deployment tools for maintenance.

Submitted by

Type : New Feature

Voting

23 votes

Campaign: Feature Requests

vR Ops integration: deliver metrics

Extend vR Ops to integration beyond notification and launch in context: deliver metrics (i.e. number of events, number of error / warning events, number of tasks, kernel warnings, VOB events) to vROps and match it to existing vROps objects (vCenter, hosts, VMs).

Submitted by

Type : New Feature

Voting

22 votes

Campaign: Feature Requests

Deduplication of Data

I was wondering if you guys could make the data be zipped/dedupped during the night? If it already does dedup or something I guess its fine but it would seem that log insight takes a lot more space then our other logging system. We are trying to move everything to log insight but space constraints don't seem to be matching up.

Submitted by

Type : Enhancement

Voting

20 votes