After you implement the Intelligent Operations Management for VMware Cloud Foundation validated solution, by using VMware or third-party components, collect log data in a central place from the components that are newly-added to or re-configured in your VMware Cloud Foundation environment.

For validated logging solutions, see VMware Cloud Foundation Validated Solutions.

If vRealize Log Insight is integrated into your VMware Cloud Foundation system, the native integration to vRealize Log Insight from vRealize Operations provides the ability to send logs for aggregation and analysis.

You can use the installed by default vRealize Log Insight content pack for vRealize Operations for collecting logs from vRealize Operations .

When you deploy vRealize Operations by using vRealize Suite Lifecycle Manager in VMware Cloud Foundation mode, SDDC Manager updates the vRealize Log Insightliagent.ini file and configures the vRealize Operations logging to vRealize Log Insight through the ingestion API.

Table 1. Design Decision on Logging for Intelligent Operations Management

Decision ID

Design Decision

Design Justification

Design Implication

IOM-VROPS-LOG-001

Use the vRealize Log Insight content pack for vRealize Operations .

Provides additional granular monitoring on the virtual infrastructure.

The content pack for vRealize Operations is installed by default in vRealize Log Insight.

None.

IOM-VROPS-LOG-002

Configure the vRealize Log Insight agent for the vRealize Operations nodes to forward logs to vRealize Log Insight in their corresponding VMware Cloud Foundation instance.

Simplifies configuration of log sources in the SDDC that are prepackaged with the vRealize Log Insight agent.

You must configure the vRealize Log Insight agent to forward logs to the vRealize Log Insight VIP.

IOM-VROPS-LOG-003

Configure vRealize Operations to send logs to the vRealize Log Insight cluster in the corresponding VMware Cloud Foundation instance.

Allows logs from vRealize Operations to be forwarded to a vRealize Log Insight cluster.

None.

IOM-VROPS-LOG-004

Communicate with the vRealize Log Insight using the default Ingestion API (cfapi) port 9000and ssl=no.

Supports disaster recovery of vRealize Operations in the SDDC. During the failover, the DNS records for vRealize Log Insight in Region A are updated to redirect to the instance in Region B to ensure the log collection remains operational. The ssl=no setting must be used when there is a certificate mismatch post failover.

Transmission traffic for logs is not encrypted.

IOM-VROPS-LOG-005

Configure a dedicated Photon OS agent group and assign the vRealize Operations Cluster and cloud proxy appliances FQDNs.

  • Provides a standardized configuration to all vRealize Log Insight agents in each of the groups.

  • Defines the vRealize Log Insight agent configuration for log collection and parsing in the context of the SDDC components, such as specific log directories, files, and formats.

Adds minimal load to the vRealize Log Insight cluster.

Prerequisites

Verify that vRealize Log Insight is deployed and operational in a logical environment in VMware Cloud Foundation mode using the corresponding vRealize Suite Lifecycle Manager instance.