Install and Configure vRealize Log Insight

Deploy vRealize Log Insight in a single cluster configuration comprising a minimum of three nodes and the vRealize Log Insight Integrated Load Balancer (ILB).

For more information about installing the vRealize Log Insight cluster, see Installing vRealize Log Insight.

Prerequisites

1. Download a copy of the vRealize Log Insight OVA file.

2. Verify that the FQDNs of the primary node and two worker nodes are registered in the DNS server for forward and reverse proxy.

3. Verify that the FQDNs and IP addresses of the primary and worker nodes are resolved by using nslookup.

4. Verify that your user account has permission to deploy an OVF template to the inventory.

5. Get familiar with Before You Install vRealize Log Insight and ensure that your environment meets all requirements.

Procedure

1. Deploy the vRealize Log Insight appliance TCI_VRLI_PRIMARY to the management cluster TCI_MGMT_CLUSTER in standalone mode as the primary node. See Deploy the vRealize Log Insight Virtual Appliance.
2. On the Administration page, select License in the left pane and enter the license key in the right pane.
3. Add the two worker nodes to the primary node TCI_VRLI_PRIMARY to form the vRealize Log Insight HA cluster. See Join an Existing Deployment.
4. Enable the Integrated Load Balancer. See Enable the Integrated Load Balancer.
5. Click Time and synchronize the time on the vRealize Log Insight appliance with the NTP server. For more information about managing vRealize Log Insight, see Administering vRealize Log Insight.
6. Integrate vRealize Log Insight with vSphere and vRealize Operations.
   1. Integrate vRealize Log Insight with vSphere. See Connect vRealize Log Insight to a vSphere Environment. Add both the Management and Resource vCenter Servers.
   2. Integrate vRealize Log Insight with vRealize Operations. See Configuring vRealize Log Insight with vRealize Operations.
   3. In vRealize Operations, configure the connection with vRealize Log Insight. See Configuring the vRealize Log Insight Adapter in vRealize Operations.
7. Install and configure the following required Content packs to monitor the events, alerts, and queries related to a specific product or set of logs.

   You can install the packs from Marketplace without leaving the vRealize Log Insight UI.

   • VMware vRealize Log Insight Content Pack for VMware Cloud Director

   • VMware vRealize Log Insight Content Pack for NSX-T

   • VMware vRealize Log Insight Content Pack for Site Recovery Manager

   • VMware vRealize Log Insight Content Pack for vRealize Orchestrator

   • VMware vRealize Log Insight Content Pack for Network Insight

   More information:

   • Install a Content Pack from the Content Pack Marketplace

   • Manually install Content packs. See

     Import a Content Pack.

8. Configure remote logging for the following products:
   1. Configure Remote Logging for VMware Cloud Director.
   2. Configure Remote Logging for NSX-T.
   3. Configure Remote Logging for vRealize Network Insight.
   4. Configure Remote Logging for Site Recovery Manager.
9. Install and configure vRealize Log Insight Linux and Windows agents. See Working with vRealize Log Insight Agents.

   vRealize Log Insight agents collect the events and log files from Linux and Windows machines and forward to the vRealize Log Management server.