You can use VMware Aria Operations for Logs to analyze unstructured or structured log data.

VMware Aria Operations for Logs accepts data from the following sources:
  • Sources that support sending log streams with the syslog protocol.
  • Sources that write log files and can run the VMware Aria Operations for Logs agent.
  • Sources that can post log data with HTTP or HTTPS through the REST API. The API documentation is available from VMware Aria Operations for Logs interface at https://<operations_for_logs_host>/rest-api.
  • Historic data that was archived by VMware Aria Operations for Logs.

The vSphere log parser allows you to import vSphere log bundles in VMware Aria Operations for Logs.

Note: Although VMware Aria Operations for Logs can handle historic data and real-time data simultaneously, you are advised to deploy a separate instance of VMware Aria Operations for Logs to process imported log files.

See Import a VMware Aria Operations for Logs archive in Administering VMware Aria Operations for Logs.