Deploy a vRealize Log Insight cluster of three nodes in the default management vSphere cluster in each VMware Cloud Foundation instance. This configuration provides continued availability and increased log ingestion rates.

vRealize Log Insight collects logs to provide logging information about components of a VMware Cloud Foundation instance from a central location.

Figure 1. Logical Design of vRealize Log Insight
vRealize Log Insight deployment includes a cluster of one primary and multiple worker nodes behind an integrated load balancer in each VMware Cloud Foundation instance. vRealize Log Insight ingests log information from all management components in a VMware Cloud Foundation instance. You access it by using a user interface and API.
You deploy a vRealize Log Insight cluster configuration that consists of the following entities.
Table 1. vRealize Log Insight Cluster Configuration

Single VMware Cloud Foundation Instance with a Single Availability Zone

Single VMware Cloud Foundation Instance with Multiple Availability Zones

Multiple VMware Cloud Foundation Instances

  • A three-node medium-size vRealize Log Insight cluster that is highly available with an integrated load balancer (ILB) deployed on the local-instance NSX segment in the management domain.

  • vSphere HA protects the vRealize Log Insight cluster.

  • A three-node medium-size vRealize Log Insight cluster that is highly available with an integrated load balancer (ILB) deployed on the local-instance NSX segment in the management domain.

  • vSphere HA protects the vRealize Log Insight cluster.

  • A vSphere DRS rule specifies that the vRealize Log Insight cluster virtual machines run on ESXi hosts in the first availability zone.

  • In each VMware Cloud Foundation instance, a three-node medium-size vRealize Log Insight cluster that is highly available with an integrated load balancer (ILB) deployed on the corresponding local-instance NSX segment in the management domain.

  • vSphere HA protects the vRealize Log Insight cluster.