Data archiving preserves old logs that might otherwise be removed from an index partition after the retention period. See Data Archiving. You can use the command line to import logs that have been archived in VMware Aria Operations for Logs.
Note: Although
VMware Aria Operations for Logs can handle historic data and real-time data simultaneously, you are advised to deploy a separate instance of
VMware Aria Operations for Logs to process imported log files.
Prerequisites
- Verify that you have the root user credentials to log in to the VMware Aria Operations for Logs virtual appliance.
- Verify that you have access to the NFS server where VMware Aria Operations for Logs logs are archived.
- Verify that the VMware Aria Operations for Logs virtual appliance has enough disk space to accommodate the imported log files.
The minimum free space in the /storage/core partition on the virtual appliance must equal approximately 10 times the size of the archived log that you want to import.
Procedure
What to do next
You can search, filter, and analyze the imported log events.