In the Consolidated SDDC, the vRealize Log Insight instance consists of one master node.

You enable the integrated load balancer (ILB) on the cluster so that all log sources can address the cluster by its ILB. By using the ILB, you need not reconfigure all log sources with a new destination address in a future scale-out. Using the ILB also guarantees that vRealize Log Insight accepts all incoming ingestion traffic.

vRealize Log Insight users, using both the Web user interface or API, and clients, ingesting logs via syslog or the Ingestion API, connect to vRealize Log Insight using the ILB address.

A vRealize Log Insight cluster can scale out to 12 nodes, that is, 1 master and 11 worker nodes.

Table 1. Design Decisions About Node Configuration for vRealize Log Insight

Decision ID

Design Decision

Design Justification

Design Implication

CSDDC-OPS-LOG-001

Deploy a single vRealize Log Insight master node with an integrated load balancer.

  • Deploys a resource-aware logging platform.

    Because of the minimal sizing requirements of the consolidated cluster, only one vRealize Log Insight node is required to accommodate the number of expected logging sources.

  • Ensures that growth to the VMware Validated Design dual-region architecture is supported.

  • Using the integrated load balancer simplifies the Log Insight deployment and subsequent integration.

  • Using the integrated load balancer simplifies the Log Insight scale-out operations reducing the need to reconfigure existing logging sources

Creates a single failure domain. The single vRealize Log Insight node must use vSphere HA for availability.