After you deploy and set up a standalone VMware Aria Operations for Logs node, you can deploy a new VMware Aria Operations for Logs instance and add it to the existing node to form a VMware Aria Operations for Logs cluster.

VMware Aria Operations for Logs can scale out by using multiple virtual appliance instances in clusters. Clusters enable linear scaling of ingestion throughput, increase query performance, and allow high-availability ingestion. In cluster mode, VMware Aria Operations for Logs provides primary and worker nodes. Both primary and worker nodes are responsible for a subset of data. Primary nodes can query all subsets of data and aggregate the results. You might require more nodes to support site needs. You can use from three to 18 nodes in a cluster. This means that a fully functional cluster must have a minimum of three healthy nodes. Most nodes in a larger cluster must be healthy. For example, if three nodes of a six-node cluster fail, none of the nodes functions fully until the failing nodes are removed.

Prerequisites

  • In the vSphere Client, note the IP address of the worker VMware Aria Operations for Logs virtual appliance.
  • Verify that you have the IP address or host name of the primary VMware Aria Operations for Logs virtual appliance.
  • Verify that you have a user account on the primary VMware Aria Operations for Logs virtual appliance with the Super Admin role, a role that has the relevant permissions. See Create and Modify Roles for more information.
  • Verify that the versions of the VMware Aria Operations for Logs primary and worker nodes are in sync. Do not add an older version VMware Aria Operations for Logs worker to a newer version VMware Aria Operations for Logs primary node.
  • Synchronize the time on the VMware Aria Operations for Logs virtual appliance with an NTP server. For more information, see Synchronize the Time on the Log Insight Virtual Appliance.
  • Login to the web user interface of the VMware Aria Operations for Logs primary node and generate a secure token on the Management > Cluster page.
  • For information on supported browser versions, see the Release Notes.

Procedure

  1. Use a supported browser to navigate to the web user interface of the VMware Aria Operations for Logs worker.
    The URL format is https:// operations_for_logs-host/, where operations_for_logs is the IP address or host name of the VMware Aria Operations for Logs worker virtual appliance.
    The initial configuration wizard opens.
  2. Click Join Existing Deployment.
  3. Enter the following details and click Go.
    1. IP address or host name of the VMware Aria Operations for Logs primary node.
    2. The secure token generated on the Management > Cluster page.
    If the primary node provides an untrusted SSL certificate, a dialog box appears with the details of the certificate. Click Accept to send a request to the VMware Aria Operations for Logs primary node to join the existing deployment.

    If you click Cancel, the join request is not sent to the primary node. You must accept the certificate to ensure that the worker node joins the existing deployment.

    The worker node joins the existing deployment and VMware Aria Operations for Logs begins to operate in a cluster.

What to do next

  • Add more worker nodes as needed. The cluster must have a minimum of three nodes.