VMware Aria Operations for Logs can integrate with other VMware products to use events and log data, and to provide better visibility into events that occur in a virtual environment.

Integration with VMware vSphere

You can set up VMware Aria Operations for Logs to connect to vCenter Server systems at two-minute intervals, and collect events, alarms, and tasks data from these vCenter Server systems. In addition, VMware Aria Operations for Logs can configure ESXi hosts through vCenter Server. See Connect VMware Aria Operations for Logs to a vSphere Environment.

Integration with VMware Aria Operations

You can integrate VMware Aria Operations for Logs with VMware Aria Operations on-premises. Integrating with the on-premises version requires additional changes to the VMware Aria Operations configuration. For information about configuring VMware Aria Operations on-premises to integrate with VMware Aria Operations for Logs, see the Getting Started with Aria Operations for Logs Guide.

VMware Aria Operations for Logs and VMware Aria Operations can be integrated in two independent ways.

Notification Events
You can set up VMware Aria Operations for Logs to send notification events to VMware Aria Operations based on queries that you create. See Configure VMware Aria Operations for Logs to Send Notifications and Metrics to VMware Aria Operations.
Launch in Context
Launch in context is a feature in VMware Aria Operations that lets you launch an external application through URL in a specific context. The context is defined by the active UI element and object selection. Launch in context lets the VMware Aria Operations for Logs adapter add menu items to different views within the custom user interface and the vSphere user interface of VMware Aria Operations. See Activate Launch in Context in VMware Aria Operations for Logs.
Note: Notification events do not depend on the launch in context configuration. You can send notification events from VMware Aria Operations for Logs to VMware Aria Operations even if you do not enable the launch in context feature.

Integration with VMware NSX Identity Firewall

You can set up VMware Aria Operations for Logs to integrate with an NSX Manager instance. Within the NSX Manager scope, you can use NSX Identity Firewall(IDFW) to create identity based firewall rules.

After configuring the integration, add predefined third-party identity providers such as GlobalProtect or ClearPass, or custom identity providers to the configuration. VMware Aria Operations for Logs parses the auth logs from these providers, extracts user ID-to-IP mapping information, and sends the data to NSX Manager. Based on this data, IDFW defines identity based firewall rules and applies the rules to users for access control.

If the environment changes, you can:
  • Change, add, or remove vSphere systems from VMware Aria Operations for Logs.
  • Change or remove the instance of VMware Aria Operations to which alert notifications are sent.
  • Change or remove the NSX Manager instance.
  • Change the passwords that are used to connect to vSphere systems, VMware Aria Operations, and NSX Identity Firewall.