Deploy VMware Aria Operations for Logs in a cluster configuration of three nodes. This configuration is set up with an integrated load balancer and uses one primary and two worker nodes.

Prerequisites

Verify that your environment fulfills the prerequisites for the deployment of VMware Aria Operations for Logs.

Prerequisite

Value

Environment

  • Verify that your environment is configured according to Before You Apply This Guidance and the Intelligent Logging and Analytics tab of the VMware Cloud Foundation Planning and Preparation Workbook.

  • Verify that the vCenter Server instances are operational.

  • Verify that the vSphere cluster has vSphere DRS and vSphere HA enabled.

  • Verify that the NSX Manager cluster is operational.

  • Verify that the local-instance NSX segment is available.

  • Verify that VMware Aria Suite Lifecycle for the VMware Cloud Foundation instance is operational.

Software

Verify that the VMware Aria Operations for Logs product binary is available.

Storage

  • Virtual disk provisioning: Thin

  • Required initial storage per node: 530 GB

  • Required initial cluster storage for archiving: 400 GB

  • Verify the following NFS datastore requirements:

    • Create an NFS share of 400 GB and export it as nfs_server:/log-archives

    • Verify that the NFS server supports NFS v3.

    • Verify that the NFS partition allows read and write operations for guest accounts.

    • Verify that the mount does not require authentication.

    • Verify that the NFS share is directly accessible to VMware Aria Operations for Logs.

    • If using a Windows NFS file server, allow unmapped user UNIX access (by UID/GID).

License

Verify that you have obtained a VMware Aria Suite or VMware Aria Operations for Logs license with a quantity that fulfills the requirements of this design.

Active Directory

Verify that you have the Active Directory domain controller configured with the role-specific users and groups for the domain.

Certificate Authority

This solution uses Microsoft Active Directory Certificate Services for Certificate Authority and the PowerShell Module for VMware Validated Solutions to generate the required certificates. However, this mosule also supports generating certificate signing requests (CSRs) for third party certificate authorities for import to the VMware Aria Suite Lifecycle locker.

  • Verify that a Microsoft Certificate Authority is available for the environment.

  • Install the PowerShell Module for VMware Validated Solutions together with the supporting modules to request an SSL certificate from your Microsoft Certificate Authority.

  • Verify that you have OpenSSL 3.0 or later installed on the system that will run the PowerShell module. The OpenSSL Wiki has a list of third-party pre-compiled binaries for Microsoft Windows.

    openssl --version

Email account

Provide an email account to send VMware Aria Operations for Logs notifications.