Add a filter to avoid forwarding log events already forwarded to Region A back to their source Log Insight deployment in Region B. Using a filter prevents looping when the Log Insight deployments in Region A and Region B forward logs to each other.

Procedure

  1. Log in to the vRealize Log Insight user interface.
    1. Open a Web browser and go to https://sfo01vrli01.sfo01.rainpole.local.
    2. Log in using the following credentials.

      Setting

      Value

      User name

      admin

      Password

      vrli_admin_password

  2. In the vRealize Log Insight user interface, click the configuration drop-down menu icon  and select Administration.
  3. Under Management, click Event Forwarding.
  4. Add a filter to prevent forwarding loops.
    1. In the Event Forwarding page of the vRealize Log Insight user interface, click the Edit icon of the SFO01 to LAX01 destination.
    2. In the Edit Destination dialog box, click Add Filter and enter the following filter attributes.

      Filter Attribute

      Value

      Filter Type

      site

      Operator

      does not match

      Value

      'LAX01'

  5. Click Save.

Results

The Event Forwarding page in the vRealize Log Insight user interface shows a summary of the forwarded events.