You can configure and customize VMware Aria Operations for Logs to change default settings, network settings, and modify storage resources. You can also configure system notifications.
What to read next
VMware Aria Operations for Logs Configuration Limits When you configure VMware Aria Operations for Logs , you must stay at or below the supported maximums.
Add a Log Filter Configuration You can add a configuration to drop logs that match the filter criteria you provide.
Add a Log Mask Configuration You can add a configuration to mask sensitive information in all logs or logs that match the filter criteria you provide.
Configuring Virtual Appliance Settings You can modify virtual appliance settings, including storage capacity and memory or CPU capacity.
Assign a License to VMware Aria Operations for Logs You can use VMware Aria Operations for Logs only with a valid license key.
Log Storage Policy The VMware Aria Operations for Logs virtual appliance uses a minimum of 100 GB of storage for incoming logs.
Managing System Notifications VMware Aria Operations for Logs provides built-in system notifications about activity related to VMware Aria Operations for Logs health, such as when disk space is almost exhausted and old log files are about to be deleted.
Add a VMware Aria Operations for Logs Log Forwarding Destination You can configure a VMware Aria Operations for Logs server to forward incoming log events to a syslog or Ingestion API target.
Configure Log Forwarding to VMware Aria Operations for Logs (SaaS) Add a cloud forwarder to forward logs from a VMware Aria Operations for Logs server to VMware Aria Operations for Logs (SaaS) without using a Cloud Proxy.
Synchronize the Time on the VMware Aria Operations for Logs Virtual Appliance You must synchronize the time on the VMware Aria Operations for Logs virtual appliance with an NTP server or with the ESX/ESXi host on which you deployed the virtual appliance.
Configure the SMTP Server for VMware Aria Operations for Logs You can configure an SMTP to allow VMware Aria Operations for Logs to send email notifications.
Configure an HTTP Proxy If your VMware Aria Operations for Logs appliance is restricted to the public network or the intranet, you can configure an HTTP proxy to let VMware Aria Operations for Logs send webhook notifications to endpoints such as Slack, PagerDuty , VMware Aria Automation Orchestrator, or a custom endpoint, which can be accessed through an isolated network.
Configure a Webhook You can configure a webhook to send alert notifications to a remote web server. Webhooks provide notifications over HTTP POST/PUT.
Install a Custom SSL Certificate By default, VMware Aria Operations for Logs installs a self-signed SSL certificate on the virtual appliance.
Add, View, and Remove SSL Certificates You can add new certificates and view the accepted SSL certificates. You can also remove certificates that you do not require anymore.
Change the Default Timeout Period for VMware Aria Operations for Logs Web Sessions By default, to keep your environment secure, VMware Aria Operations for Logs Web sessions expire in 30 minutes. You can increase or decrease the timeout duration.
Retention and Archiving You can retain log data in index partitions by defining different retention periods for different types of logs. For example, you can define a short retention period for logs with sensitive information. You can also archive the log data in a partition for an extended period of time. If you enable archiving for an index partition, the data in the partition is moved to an NFS mount after its retention period.
Restart the VMware Aria Operations for Logs Service You can restart VMware Aria Operations for Logs by using the Cluster page in the Web user interface.
Power off the VMware Aria Operations for Logs Virtual Appliance To avoid data loss when powering off a VMware Aria Operations for Logs primary or worker node, you must power off the node by following a strict sequence of steps.
Download a VMware Aria Operations for Logs Support Bundle If VMware Aria Operations for Logs does not operate as expected because of a problem, you can send a copy of the log and configuration files to VMware Support Services in the form of a support bundle.
Activate or Deactivate VMware Customer Experience Improvement Program (CEIP) After deploying VMware Aria Operations for Logs , by default, your account is activated to take part in the VMware Customer Experience Improvement Program (CEIP). However, you can opt out of the CEIP program.
Activate FIPS for VMware Aria Operations for Logs You can configure VMware Aria Operations for Logs to ensure FIPS (Federal Information Processing Standards) compliance for better security. This set of standards describes document processing, encryption algorithms, and other information technology standards for use within United States' non-military government agencies and by government contractors and vendors who work with the agencies. When you activate FIPS, VMware Aria Operations for Logs uses the FIPS 140-2 standard with Security Level 1, which specifies basic security requirements to protect sensitive or valuable data.