Define an exception rule for unblocking the VMware Aria Operations for Logs Windows Agent in the Windows firewall.

The procedure applies to Windows Server 2008 R2 and later, and to Windows 7 and later.

Prerequisites

  • Verify that you have a Super Admin account or an account with Super Admin permissions.

Procedure

  1. Select Start > Run.
  2. Type wf.msc and click OK.
  3. Right-click Outbound rules in the left pane and click New Rule.
  4. Select Custom and follow the wizard to set the following options.
    Option Description
    Program liwinsvc.exe
    Service LogInsightAgentService
    Protocol and Ports TCP 9000 for cfapi and 514 for syslog
  5. On the Specify the profiles for which this rule applies page, select the appropriate network type.
    • Domain
    • Public
    • Private
    Note: You can select all network types to make sure that the exception rule is active regardless of the network type.

What to do next

Go to the VMware Aria Operations for Logs Windows Agent log directory %ProgramData%\VMware\Log Insight Agent\log and open the latest log file. If recent events contain the messages Config transport error: Couldn't resolve host name and Resolver failed. No such host is known, restart the VMware Aria Operations for Logs Windows Agent service and the Windows machine.

Note: The VMware Aria Operations for Logs Windows Agent service can take up to 5 minutes to reconnect to the server.