Add a cloud forwarder to forward logs from a VMware Aria Operations for Logs server to VMware Aria Operations for Logs (SaaS) without using a Cloud Proxy.

Use cloud forwarding to send filtered or tagged events to VMware Aria Operations for Logs (SaaS). Cloud forwarding lets you consolidate logging over different networks and eventually concentrate data in VMware Aria Operations for Logs (SaaS).

Prerequisites

  • Verify that you are logged in to the VMware Aria Operations for Logs web user interface as a Super Admin user, or a user associated with a role that has the relevant permissions. See Create and Modify Roles for more information. The URL format of the web user interface is https://operations-for-logs-host, where operations-for-logs-host is the IP address or host name of the VMware Aria Operations for Logs virtual appliance.

  • Verify that you have integrated your VMware Aria Operations for Logs server with a VMware Aria Operations for Logs (SaaS) service. See Integrate VMware Aria Operations for Logs with VMware Aria Operations for Logs (SaaS) for more information.

Procedure

  1. Expand the main menu, click Log Management, and then click Cloud Forwarding.
  2. Click New Forwarder and provide the following information.
    Option Description
    Name A unique name for the cloud forwarder.
    Note: Once you assign a name for the forwarder, you cannot modify the name.
    Cloud channel Select the cloud channel you created on the VMware Aria Operations for Logs (SaaS) page.
    Tags Optionally, add tag pairs with predefined values. Tags let you query logs easily. You can add multiple comma-separated tags.
    Filter Control which logs are forwarded to VMware Aria Operations for Logs (SaaS).

    Select static fields and constraints to define the desired logs. If you do not select a filter, all logs are forwarded. You can see the results of the filter you are building by clicking Run in Explore Logs page.

    For information about using filters in a cloud forwarder, see Using Log Management Filters in Explore Logs.
  3. (Optional) To modify additional cloud forwarding information, click Show Advanced Settings.
    Option Description
    Worker Count The number of simultaneous outgoing connections to use. Set a higher worker count for a higher network latency to VMware Aria Operations for Logs (SaaS) and for a greater number of forwarded logs per second. The default value is 16.
  4. Click Save.

Results

The relevant logs are forwarded to the VMware Aria Operations for Logs (SaaS) service. You can query these logs in the Explore Logs page of the service.