vRealize Log Insight collects log events from all management components in both regions of the SDDC.
In the VMware Validated Design for Workload and Management Consolidation, deploy a single vRealize Log Insight instance that consists of a single master node. This configuration allows for the required functionality and the log ingestion rates generated from the management components.
Sources of Log Data
vRealize Log Insight collects logs as to provide monitoring information about the SDDC from a central location.
vRealize Log Insight collects log events from the following virtual infrastructure and cloud management components.
Platform Services Controller
NSX for vSphere for the consolidated cluster
NSX Controller instances
NSX Edge services gateway instances
NSX universal distributed logical router instances
NSX distributed firewall ESXi kernel module
vRealize Automation Appliance
vRealize IaaS Web Server
vRealize IaaS Management Server
vRealize IaaS DEM
vRealize Agent Servers
vRealize Orchestrator (embedded in the vRealize Automation Appliance)
Microsoft SQL Server
vRealize Business server
vRealize Business data collectors
vRealize Operations Manager
Analytics cluster node