VMware Aria Operations for Logs collects data over the syslog protocol and HTTP. VMware Aria Operations for Logs can connect to vCenter Server to collect events, tasks, and alarms data; and can integrate with VMware Aria Operations to send notification events and enable launch in context. Check the VMware Aria Operations for Logs Release Notes for latest updates on supported product versions.

Virtual Appliance Deployment

You must deploy the VMware Aria Operations for Logs virtual appliance using vSphere. Always use a vSphere Client to connect to a vCenter Server. The VMware Aria Operations for Logs virtual appliance is deployed on an ESX/ESXi host version 5.0 or later that is managed by vCenter Server version 5.0 or later.

Syslog Feeds

VMware Aria Operations for Logs collects and analyzes syslog data over the following ports and protocols:

  • 514/UDP
  • 514/TCP
  • 1514/TCP (SSL)

You must configure environment components such as operating systems, applications, storage, firewalls, and network devices to push their syslog feeds to VMware Aria Operations for Logs.

API Feeds

The VMware Aria Operations for Logs Ingestion API collects data over the following ports and protocols.
  • 9000/TCP
  • 9543/TCP (SSL)

vSphere Integration

You can configure VMware Aria Operations for Logs to pull data for tasks, events, and alarms that occurred in one or more vCenter Server instances. VMware Aria Operations for Logs uses the vSphere API to connect to vCenter Server systems and collect data.

You can configure ESXi hosts to forward syslog data to VMware Aria Operations for Logs.

For compatibility information with specific versions of vCenter Server and ESXi, see the VMware Product Interoperability Matrixes.

For information about connecting to a vSphere environment, see Connect to a vSphere Environment.

VMware Aria Operations Integration

VMware Aria Operations for Logs and VMware Aria Operations vApp or Installable can be integrated in two independent ways.

All supported versions of VMware Aria Operations support notifications as well as Launch in Context.