Setting up VMware Log Insight for the first time

Product version used 

VMware vRealize Log Insight 4.3.0 Build 5084751

Deployment of vRealize Log Insight

A simple deployment of vRealize Log Insight was performed using the OVA appliance available from VMware site.

Deployment guide used :

Below are some of the key details that we need to know before getting started and is covered in the above document.

  • Network Port requirement [Page 10]
  • Types of deployment supported [Page10]
  • Life cycle of an event [Page 15]
  • vRealize Log Insight Sizing Calculator [Page 12]

Use static IP addresses (and FQDN ) for all nodes in a vRealize Log Insight cluster nodes and load balanacer. Refer doc.

vRealize Log Insight reference architecture

Architecture Overview :

Design Detail :

VMware vRealize Log Insight Calculator :

Getting started with OVA deployment :

Source : [Please go through the document before deployment for do’s and don’t]

  1. Select the vSphere Deploy OVF Template option.
  2. Enter the path to the vRealize Log Insight OVA file ( “[local drive]:\VMware-vRealize-Log-Insight-4.3.0-5084751.ova” ).
  3. Proceed with the prompt which shows the vRealize Log Insight template details
  4. Accept the VMware End user license agreement and click next.
  5. Specify the name and Inventory location to deploy the template to (Name of the deployed VM : vRealize Log Insight and location : [vCenter Server Name]/[Datacenter Name]/[Host & Cluster Name]/[Resource Pool Name]) and click next.
  6. Select Configuration size for the virtual machine ( Configuration :Small has been selected to monitor 2000 VMs and the size of this deployment is 4 vCPU, 8 GB RAM, 510GB for storage [Thick Provisioned Eagered Zero is the higly suitable disk type] ) and click next.
    Log Ingest Rate
    Virtual CPUs
    Syslog Connections (Active TCP Connections)
    Events per Second
    Extra Small 6 GB/day 2 4 GB 75 20 400
    Small 30 GB/day 4 8 GB 500 100 2000
    Medium 75 GB/day 8 16 GB 1000 250 5000
    Large 225 GB/day 16 32 GB 1500 750 15,000

    Source : [page 18].

  7. If you select Large, you must upgrade the virtual hardware on the vRealize Log Insight virtual machine after the deployment.
  8. Select the host cluster to which you want to deploy the VM to (Selected [Host and cluster] as the host cluster for deployment) and click next.
  9. Select the resource pool to deploy the VM too (Under [Host and Clusters]we have [Resource Pool] which has been selected as destination) and click next.
  10. Select destination datastore [where we want to store the deployed VM] and click next.
  11. Select the disk format to store the virtual disks (options) Thick Provision Lazy Zeroed, Thick Provision Eager Zeroed, Thin provisioned (select : Thinprovision for minimal storage usage) and click next.
  12. Select the destination networks (select a virtual machine port group) and click next
  13. In Properties, please provide Networking Properties and other properties details and click on Next to proceed.
  14. Select the check box for Power on after deployment under Ready to Complete and click Finish.
  15. It will take few minutes for deployment to complete.

Post OVA Deployment configuration of vRealize Log Insight appliance

Once the VM has been deployed and powered ON we would need to access the IP address provided during the deployment of OVA on a web browser like firefox, IE or chrome and we would see a web based UI with following options.

  1. On accessing the IP address from a web browser we will get a security exception while opening the web UI, we need to add an exception for it on the browser (needs to be done one time only).
  2. Post adding the exception the page will reload and show the below option, click on Next to continue further.
    Log Insight - Welcome Screen
  3. Choose the Deployment type, since this is a new install we will select Start New Installation.
    Log Insight - Deployment type
  4. It will take a few minutes for the deployment to complete and to display options for further configuration.

What Next

  1. It will prompt to provide credential for admin account and it needs an email address.Log Insight - Admin Credential
  2. Click on Save and Continue.
  3. Next it asks you to provide the License key, it is not mandatory to add the license key right now, it can be added later on as well.
  4. Please provide email addresses to which we need to send the notifications too and if we want to join the VMware Customer Experience Improvement Program.
    Log Insight - General Configuration
  5. Provide Time Configuration, time can be synced with NTP server or with ESXi hosts time.
    Log Insight - Time Configuration
  6. SMTP configuration detail needs to be provided.
    Log Insight - SMTP configuration
  7. Click on Finish and this completes the wizard.
    Log Insight - Setup Complete

Note : Since this was investigation, we went ahead with single node log insight deployment.

Starting the vSphere Integration with vRealize Log Insight

  1. Navigate to the IP address of vRealize Log Insight and log on to the UI using the credential.
  2. Click on  Log Insight - button and click on Administration and on this window click on vSphere under Integration heading.
  3. Provide the vCenter server or ESXi FQDN / IP here for monitoring.
  4. Provide admin credential to log on to vRealize log insight.
  5. Click on test connection to verify the connection, message appears saying Test successful.
  6. And click on save to update it on the log insight services.
  7. A message pops-up saying Configuration completed successfully.
    Log Insight - vSphere Integration


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s