Configure archive and retention parameters of vRealize Log Insight according to the company policy for compliance and governance.

vRealize Log Insight virtual appliances contain three default virtual disks and can use addition virtual disks for storage.

Table 1. Virtual Disk Configuration in the vRealize Log Insight Virtual Appliance

Hard Disk



Hard disk 1

20 GB

Root file system

Hard disk 2

510 GB for small-size deployment

Contains two partitions:

  • /storage/var System logs

  • /storage/core Storage for Collected logs.

Hard disk 3

512 MB

First boot only

Calculate the storage space that is available for log data using the following equation:

/storage/core = hard disk 2 space - system logs space on hard disk 2

Based on the size of the default disk, the storage core is equal to 490 GB.

/storage/core = 510GB - 20 GB = 490 GB
Retention = /storage/core – 3% * /storage/core

If /storage/core is 490 GB, vRealize Log Insight can use 475 GB for retention.

Retention = 490 GB - 3% * 490 ≈ 475 GB 

Configure a retention period of 7 days for the small-size vRealize Log Insight appliance.

Table 2. Retention Period Design Decision

Decision ID

Design Decision

Design Justification

Design Implication


Configure vRealize Log Insight to retain data for 7 days.

Accommodates logs from 300 syslog sources (100 per node).

Disk size allows 750 syslog sources with 7 days retention, although the small appliance size limits each node to 100 connections or 300 total.

If you must support a log retention period that is greater than amount of available storage, additional storage may be added to each virtual appliance. When adding storage to increase the retention, the capacity supplied must be identical across all virtual appliances.