Use the in-built problem and alert signatures in vRealize Log Insight to create alerts for network-related events and map them to the vRealize Operations Manager inventory. For each alert, you create one instance for the management data center and one instance for the shared edge and compute data center in each region.

About this task

For basic monitoring of the vSphere networking components, use the following alerts:

Table 1. vSphere Networking Alerts in vRealize Log Insight

Alert Name

Purpose

Severity

Network: ESXi physical NIC down

ESXi has reported that a physical NIC has become unavailable. Assuming other NICs are still online this indicates a lack of redundancy and a potential performance impact. If all physical NICs for a vSwitch/dvSwitch are unavailable, then communication problems to VMs and/or the ESXi host may be possible.

Critical

Network: ESXi uplink redundancy lost

Only one physical NIC is currently connected, one more failure will result in a loss of connectivity.

Critical

Network: Out of Memory

ESXi 5.0 or later hosts with NetQueue enabled, run out of memory when using jumbo frames (MTU is 9000 bytes). The lack of memory for network packets leads to lost virtual machine connectivity and may also lose connection with the vCenter Server. Other symptoms include:

  • Network performance of network card is substantially degraded

  • NFS datastores mounted and accessed through this card become unmounted or flap between connected and disconnected state.vMotions time-out

  • Restarting host management agents fail to complete when they attempt to reinitialize

Critical

Procedure

  1. Open the vRealize Log Insight user interface.
    1. Open a Web browser and go to the following URL.

      Region

      vRealize Log Insight URL

      Region A

      https://sfo01vrli01.sfo01.rainpole.local

      Region B

      https://lax01vrli01.lax01.rainpole.local

    2. Log in using the following credentials.

      Setting

      Value

      User name

      admin

      Password

      vrli_admin_password

  2. In the vRealize Log Insight user interface, click Interactive Analytics.
  3. Click the icon and select Manage Alerts.
  4. Select an alert that is related to vSphere networking.
    1. In the search box of the Alerts dialog box, enter the following alert name as a search phrase.

      Network: ESXi physical NIC down
    2. Select the alert from the search result and click the Edit icon next to the alert name.
  5. Create an instance of the alert for each data center in the region.
    1. In the New Alert dialog box, click Run Query.

      A query editor page opens.

    2. Click Add Filter and use the drop-down menus to define the following filter.
      Table 2. Filters for vRealize Log Insight in Region A

      Filter

      Value for Management vSphere Networking Alerts in Region A

      Value for Compute vSphere Networking Alerts in Region A

      Object type

      vmw_datacenter

      vmw_datacenter

      Operation

      contains

      contains

      Object

      sfo01-m01dc

      sfo01-w01dc

      Table 3. Filters for vRealize Log Insight in Region B

      Filter

      Value for Management vSphere Networking Alerts in Region B

      Value for Compute vSphere Networking Alerts in Region B

      Object type

      vmw_datacenter

      vmw_datacenter

      Operation

      contains

      contains

      Object

      lax01-m01dc

      lax01-w01dc

    3. Click on the Search icon.
    4. Click the icon and select Create Alert from Query.
    5. In the New Alert dialog box, configure the following alert settings and click Save.
      Table 4. Alerts for vRealize Log Insight in Region A

      Setting

      Value for Management vSphere Networking Alert in Region A

      Value for Compute vSphere Networking Alert in Region A

      Name

      Network: ESXi physical NIC down (sfo01-m01dc)

      Network: ESXi physical NIC down (sfo01-w01dc)

      Description (Recommendation)

      networking_alert_purpose

      See vSphere Networking Alerts in vRealize Log Insight.

      networking_alert_purpose

      See vSphere Networking Alerts in vRealize Log Insight.

      Email

      Email address to send alerts to

      Email address to send alerts to

      Send to vRealize Operations Manager

      Selected

      Selected

      Fallback Object (All Objects)

      sfo01-m01dc

      sfo01-w01dc

      Criticality

      critical

      critical

      Raise an alert

      On any match

      On any match

      Table 5. Alerts for vRealize Log Insight in Region B

      Setting

      Value for Management vSphere Networking Alert in Region B

      Value for Compute vSphere Networking Alert in Region B

      Name

      Network: ESXi physical NIC down (lax01-m01dc)

      Network: ESXi physical NIC down (lax01-w01dc)

      Description (Recommendation)

      networking_alert_purpose

      See vSphere Networking Alerts in vRealize Log Insight.

      networking_alert_purpose

      See vSphere Networking Alerts in vRealize Log Insight.

      Email

      Email address to send alerts to

      Email address to send alerts to

      Send to vRealize Operations Manager

      Selected

      Selected

      Fallback Object (All Objects)

      lax01-m01dc

      lax01-w01dc

      Criticality

      critical

      critical

      Raise an alert

      On any match

      On any match

    6. Repeat the steps to create the alert instance for the other data center in the region.
  6. Repeat Step 3 to Step 5 for the rest of the alerts, configuring two instances of each alert in the region.
  7. Repeat the procedure in vRealize Log Insight to create the alerts for both data centers in the other region.