After you configure log forwarding in Region B to tag log events based on the site, update the filter used in Region A to avoid forwarding log events already forwarded to Region A back to their source Log Insight deployment in Region B.

Procedure

  1. Log in to the vRealize Log Insight user interface.
    1. Open a Web browser and go to https://sfo01vrli01.sfo01.rainpole.local.
    2. Log in using the following credentials.

      Setting

      Value

      User name

      admin

      Password

      vrli_admin_password

  2. In the vRealize Log Insight user interface, click the configuration drop-down menu icon  and select Administration.
  3. Under Management, click Event Forwarding.
  4. On the Event Forwarding page, click SFO01 to LAX01 and edit the following forwarding settings in the Edit Destination dialog box.
    1. Click Remove Filter to remove deprecated Filter for tag Does Not Match 'LAX01'.
    2. Click Add Filter for site Does Not Match 'LAX01'.

      Forward Destination Setting

      Value

      Filter Type

      site

      Operator

      does not match

      Value

      'LAX01'

  5. In the Edit Destination dialog box, click Test to verify that the connection settings remain correct.
  6. Click Save.

Results

The Event Forwarding page in the vRealize Log Insight user interface shows a summary of the forwarded events.