Before you configure VMware Aria Operations for Logs (SaaS) to collect alarms, events, and tasks data from a vSphere environment, you must connect VMware Aria Operations for Logs (SaaS) to one or more vCenter Server systems.
VMware Aria Operations for Logs (SaaS) can collect two types of data from vCenter Server instances and the ESXi hosts that they manage.
- Events, tasks, and alerts are structured data with specific meaning. If configured,VMware Aria Operations for Logs (SaaS) pulls events, tasks, and alerts from the registered vCenter Server instances.
- Logs contain unstructured data that can be analyzed in VMware Aria Operations for Logs (SaaS). ESXi hosts or vCenter Server Appliance instances can push their logs to VMware Aria Operations for Logs (SaaS) through syslog.
Prerequisites
- For the level of integration that you want to achieve, verify that you have user credentials with enough privileges to perform the necessary configuration on the vCenter Server system and its ESXi hosts.
Level of Integration Required Privileges Events, tasks, and alarms collection - Note: is a system-defined privilege. When you add a custom role and do not assign any privileges to it, the role is created as a Read Only role with three system-defined privileges: , , and .
Syslog configuration on ESXi hosts Note: You must configure the permission on the top-level folder within the vCenter Server inventory, and verify that the Propagate to children check box is selected. - Verify that you know the IP address or domain name of the vCenter Server system.
Verify that you are logged in to the VMware Aria Operations for Logs (SaaS) web user interface as an administrator.
- For the vSphere integration to function correctly, ensure that the Cloud Proxy virtual machine is set up with a host name that meets the following criteria:
- The host name is valid.
- The host name can be resolved through DNS.
- The host name is reachable from the ESXi host.
Procedure
What to do next
- Collect events, tasks, and alarms data from the vCenter Server instance that you registered. See Configure VMware Aria Operations for Logs (SaaS) to Pull Events, Tasks, and Alarms from a vCenter Server Instance.
- Collect syslog feeds from the ESXi hosts that the vCenter Server manages. See Configure an ESXi Host to Forward Log Events to VMware Aria Operations for Logs (SaaS).