Create a vRealize Log Insight Photon OS Agent Group for the Standalone Workspace ONE Access for Identity and Access Management for VMware Cloud Foundation

During the vRealize Log Insight deployment, SDDC Manager installs the Linux System content pack. To receive log events from the standalone Workspace ONE Access appliance, you create an agent group in vRealize Log Insight.

UI Procedure

1. Log in to vRealize Log Insight at https://<vrealize_log_insight_fqdn> with a user assigned the Super admin role.
2. On the main navigation bar, click Administration.

3. In the left pane, click Management > Agents.

4. From the All agents drop-down menu, for the Linux - Systemd agent, click the Copy template icon.

5. In the Copy agent group dialog box, enter Photon OS (IAM) - Appliance Agent Group as name and click Copy.

6. On the Agents page, configure the default filter for the new agent.

   1. From the first drop-down menu, select hostname.

   2. From the second drop-down menu, select matches.

   3. In the text box, enter the Standalone Workspace ONE Access FQDN.

7. Click Refresh data and verify that the agent listed in the filter appears in the Agents list.

8. At the bottom of the page, click Save new group.

PowerShell Procedure

1. Start Windows PowerShell.

2. Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.

   $sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"
   $sddcManagerUser = "[e-mail]"
   $sddcManagerPass = "VMw@re1!"
   
   $agentGroupName = "Photon OS (IAM) - Appliance Agent Group"
   $vmList = "sfo-wsa01.sfo.rainpole.io"

3. Perform the configuration by running the command in the PowerShell console.

   Add-vRLIAgentGroup -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -agentGroupType photon -agentGroupName $agentGroupName -criteria $vmList