Log Insight 4.8 Deployment Guide

Preparing for Log Insight 4.8 Installation Requirements

Virtual Hardware

During deployment of the vRealize Log Insight virtual appliance, you can select from preset configuration sizes according to the ingestion requirements for your environment. The presets are certified size combinations of compute and disk resources, though you can add extra resources afterward

Log Insight Account Passwords

Root Account – Unless you specify a root password or use guest customization during the deployment of the OVA, the default credentials for the root user on the vRealize Log Insight virtual appliance are root/<blank>. You are prompted to change the root account password when you first access the vRealize Log Insight virtual appliance console. 

Log Insight Integration Requirements

vCenter Server – To pull events, tasks, and alarms data from a vCenter Server, you must provide a set of user credentials for that vCenter Server. The minimum role required to register and unregister vRealize Log Insight with a vCenter Server is Read-only. The role must be set at the vCenter Server level and propagated to child objects. To configure ESXi hosts that a vCenter Server manages, vRealize Log Insight requires additional privileges.

vSphere ESXi – vSphere ESXi 6.0 update 1 or later is required to establish SSL connections to vRealize Log Insight.

vRealize Operations Manager – To enable notification events and the launch-in-context functionality in a vRealize Operations Manager instance, you must provide user credentials for that vRealize Operations Manager instance. 

Network Port Requirements

The following network ports must be externally accessible.

Deploying Log Insight (VRLI) 4.8 Appliance

Login to vCenter – Right click Cluster or Host – Deploy OVA template – provide Name for appliance and select the OVA file downloaded.

Provide the Location of the OVA Deployment File.

Provide the Name for VM to display and select VM folder.

Select the host and Next.

Review and Next.

Accept the EULA and Next.

Select Size and Next.

Select Disk provision as Thin or Thick and Next.

Thick Provision Lazy Zeroed creates a virtual disk in a default thick format. Space required for the virtual disk is allocated when the virtual disk is created. The data remaining on the physical device is not erased during creation, but is zeroed out on demand later, on first write from the virtual appliance.

Thick Provision Eager Zeroed creates a type of thick virtual disk that supports clustering features such as Fault Tolerance. Space required for the virtual disk is allocated at creation time.In contrast to the flat format, the data remaining on the physical device is zeroed out when the virtual disk is created. It might take much longer to create disks in this format than to create other types of disks.

Important Deploy the vRealize Log Insight virtual appliance with thick provisioned eager zeroed disks whenever possible for better performance and operation of the virtual appliance.

Select the Network port group for Log Insight appliance Network and Next.

Provide below information and click Next. 

  • Hostname
  • Network IP
  • Network Mask
  • Default Gateway
  • DNS Server
  • Domain searchpath
  • DNS Domain
  • Root Password

Review and finish to deploy the appliance.

Watch the Recent Tasks to Monitor your ova Deployment.

Power on your new Log Insight Virtual machine.

The first time the Log Insight Boot he run the install.sh that Configure the System, this step can take 10-15 min.

The console of Log Insight appliance will look like this, as you notices it has automatically detected the DNS record from DNS server as shown below.

Log Insight 4.8 Cluster configuration

Open Log Insight using https://vrli01.mt.local/admin or as shown below. vrli01.mt.local is my first Log Insight Cluster Member. Please click Next

Click to start New Deployment

provide the Email and new Password for the VRLI , remember that the default password is blank. i did have a few issues in the past that i was getting an error on this step, please try to restart the appliance and try again to see if the result change.

provide a valid vRealize or Log Insight License.

You will need to provide the Email System Notification and the HTTP post System Notification System, this Configuration can be ignore and be configure at later time.

provide a Valid NTP Server and click SAVE and Continue.

Provide the SMTP Configuration to enable sending Log insight Notification on Alerts within Log Insight Alarm List.

Press Finish to complete the Log Insight Configuration.

Log Insight 4.8 Vsphere Data Ingest configuration

Choose Configure vSphere Integration.

Provide the Vsphere Integration Details that include : Vcenter Hostname , Username and Password needed for the Integration.

you have the option to mark/unmark the collection of Vcenter Events,Tasks and Alarms.

you have the option to mark/unmark the collection ESXI Hosts to send logs to Log insight

After provide the details please press TEST CONNECTION to see if the integration is working well and then SAVE the Configuration

if there is any problem with the Account or Firewall you will see an error but if the Configuration want well you will see the message on Successfully Finish.

Leave a Reply

Your email address will not be published. Required fields are marked *