Use the in-built problem and alert signatures in vRealize Log Insight to create alerts for network-related events and map them to the vRealize Operations Manager inventory. For each alert, you create one instance for the management data center and one instance for the shared edge and compute data center in each region.

For basic monitoring of the vSphere networking components, use the following alerts:

Table 1. vSphere Networking Alerts in vRealize Log Insight
Alert Name Purpose Severity
Network: ESXi physical NIC down ESXi has reported that a physical NIC has become unavailable. Assuming other NICs are still online this indicates a lack of redundancy and a potential performance impact. If all physical NICs for a vSwitch/dvSwitch are unavailable, then communication problems to VMs and/or the ESXi host may be possible. Critical
Network: ESXi uplink redundancy lost Only one physical NIC is currently connected, one more failure will result in a loss of connectivity. Critical
Network: Out of Memory ESXi 5.0 or later hosts with NetQueue enabled, run out of memory when using jumbo frames (MTU is 9000 bytes). The lack of memory for network packets leads to lost virtual machine connectivity and may also lose connection with the vCenter Server. Other symptoms include:
  • Network performance of network card is substantially degraded
  • NFS datastores mounted and accessed through this card become unmounted or flap between connected and disconnected state.vMotions time-out
  • Restarting host management agents fail to complete when they attempt to reinitialize
Critical

Procedure

  1. Open the vRealize Log Insight user interface.
    1. Open a Web browser and go to the following URL.
      Region vRealize Log Insight URL
      Region A https://sfo01vrli01.sfo01.rainpole.local
      Region B https://lax01vrli01.lax01.rainpole.local
    2. Log in using the following credentials.
      Setting Value
      User name admin
      Password vrli_admin_password
  2. In the vRealize Log Insight user interface, click Interactive Analytics.
  3. Click the icon and select Manage Alerts.
  4. Select an alert that is related to vSphere networking.
    1. In the search box of the Alerts dialog box, enter the following alert name as a search phrase.
      Network: ESXi physical NIC down
    2. Select the alert from the search result and click the Edit icon next to the alert name.
  5. Create an instance of the alert for each data center in the region.
    1. In the New Alert dialog box, click Run Query.
      A query editor page opens.
    2. Click Add Filter and use the drop-down menus to define the following filter.
      Table 2. Filters for vRealize Log Insight in Region A
      Filter Value for Management vSphere Networking Alerts in Region A Value for Compute vSphere Networking Alerts in Region A
      Object type vmw_datacenter vmw_datacenter
      Operation contains contains
      Object sfo01-m01dc sfo01-w01dc
      Table 3. Filters for vRealize Log Insight in Region B
      Filter Value for Management vSphere Networking Alerts in Region B Value for Compute vSphere Networking Alerts in Region B
      Object type vmw_datacenter vmw_datacenter
      Operation contains contains
      Object lax01-m01dc lax01-w01dc
    3. Click on the Search icon.
    4. Click the icon and select Create Alert from Query.
    5. In the New Alert dialog box, configure the following alert settings and click Save.
      Table 4. Alerts for vRealize Log Insight in Region A
      Setting Value for Management vSphere Networking Alert in Region A Value for Compute vSphere Networking Alert in Region A
      Name Network: ESXi physical NIC down (sfo01-m01dc) Network: ESXi physical NIC down (sfo01-w01dc)
      Description (Recommendation)

      networking_alert_purpose

      See Table 1.

      networking_alert_purpose

      See Table 1.

      Email Email address to send alerts to Email address to send alerts to
      Send to vRealize Operations Manager Selected Selected
      Fallback Object (All Objects) sfo01-m01dc sfo01-w01dc
      Criticality critical critical
      Raise an alert On any match On any match
      Table 5. Alerts for vRealize Log Insight in Region B
      Setting Value for Management vSphere Networking Alert in Region B Value for Compute vSphere Networking Alert in Region B
      Name Network: ESXi physical NIC down (lax01-m01dc) Network: ESXi physical NIC down (lax01-w01dc)
      Description (Recommendation)

      networking_alert_purpose

      See Table 1.

      networking_alert_purpose

      See Table 1.

      Email Email address to send alerts to Email address to send alerts to
      Send to vRealize Operations Manager Selected Selected
      Fallback Object (All Objects) lax01-m01dc lax01-w01dc
      Criticality critical critical
      Raise an alert On any match On any match
    6. Repeat the steps to create the alert instance for the other data center in the region.
  6. Repeat Step 3 to Step 5 for the rest of the alerts, configuring two instances of each alert in the region.
  7. Repeat the procedure in vRealize Log Insight to create the alerts for both data centers in the other region.