To configure the NSX Edge nodes to send audit logs and system events to vRealize Log Insight, you use the NSX Manager UI.

UI Procedure

  1. Log in to NSX Local Manager for the management domain at https://<management_domain_nsx_local_manager_fqdn>/login.jsp?local=true as admin.
  2. On the main navigation bar, click System.
  3. In the left pane, in the Configuration section, click Fabric > Profiles.

  4. Click the Node profiles tab.

  5. Use the All NSX nodes profile to configure log forwarding for all nodes for the current NSX Manager instance.

    1. Select the All NSX Nodes profile, and, in the Syslog Servers section, click Add.

    2. In the Add Syslog server dialog box, enter the following settings and click Add.

      HTTP Request Field

      Setting

      FQDN or IP address

      <vrli-cluster-fqdn>

      Port

      514

      Protocol

      TCP

      Log Level

      Information

  6. Repeat this procedure for the remaining NSX Local Manager instances in the remaining VI workload domains.

PowerShell Procedure

  1. Start Windows PowerShell.

  2. Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.

    $sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"
    $sddcManagerUser = "administrator@vsphere.local"
    $sddcManagerPass = "VMw@re1!"
    
    $sddcDomainName = "sfo-m01"
  3. Perform the configuration by running the command in the PowerShell console.

    Add-NsxtNodeProfileSyslogExporter -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $sddcDomainName
  4. Repeat this procedure for all VI workload domains.