You can use VMware Aria Operations for Logs to analyze unstructured or structured log data.
VMware Aria Operations for Logs accepts data from the following sources:
- Sources that support sending log streams with the syslog protocol.
- Sources that write log files and can run the VMware Aria Operations for Logs agent.
- Sources that can post log data with HTTP or HTTPS through the REST API. The API documentation is available from VMware Aria Operations for Logs interface at https://<operations_for_logs_host>/rest-api.
- Historic data that was archived by VMware Aria Operations for Logs.
The vSphere log parser allows you to import vSphere log bundles in VMware Aria Operations for Logs.
Note: Although
VMware Aria Operations for Logs can handle historic data and real-time data simultaneously, you are advised to deploy a separate instance of
VMware Aria Operations for Logs to process imported log files.
See Import a VMware Aria Operations for Logs archive in Administering VMware Aria Operations for Logs.