To start sending logs from the clustered Workspace ONE Access to VMware Aria Operations for Logs, install and configure the VMware Aria Operations for Logs agent on each Workspace ONE Access node.

Procedure

  1. Download the VMware Aria Operations for Logs agent.

    1. Log in to the first node of the clustered Workspace ONE Access at <first_workspace_one_access_fqdn>:22 by using a SecureShell (SSH) client as sshuser.

    2. Switch to the root user by running the command.

      su

    3. Download and install the .rpm file by running the command.

      curl -k -o /tmp/liagent.rpm https://<aria_operations_for_logs_fqdn>/api/v1/agent/packages/types/rpm; rpm -Uvh /tmp/liagent.rpm

  2. Configure the VMware Aria Operations for Logs agent.

    1. Configure the VMware Aria Operations for Logs agent to start automatically by running the command.

      systemctl enable liagentd

    2. Edit the liagent.ini file by using vi.

      vi /var/lib/loginsight-agent/liagent.ini

    3. In the [server] section, modify the following parameters and save the file.

      [server] 
hostname=<aria_operations_for_logs_fqdn>
proto=cfapi
port=9000
ssl=no

  3. Restart the VMware Aria Operations for Logs agent by running the command.

    systemctl restart liagentd

  4. Verify the running status of the VMware Aria Operations for Logs agent.

    systemctl status liagentd

  5. Repeat this procedure for the remaining nodes of the clustered Workspace ONE Access.