Add a filter to avoid forwarding log events already forwarded to Region A back to their source Log Insight deployment in Region B. Using a filter prevents looping when the Log Insight deployments in Region A and Region B forward logs to each other.

Procedure

  1. Log in to the vRealize Log Insight user interface.
    1. Open a Web browser and go to https://sfo01vrli01.sfo01.rainpole.local.
    2. Log in using the following credentials.
      Setting Value
      User name admin
      Password deployment_admin_password
  2. In the vRealize Log Insight user interface, click the configuration drop-down menu icon  and select Administration.
  3. Under Management, click Event Forwarding.
  4. Add a filter to prevent forwarding loops.
    1. In the Event Forwarding page of the vRealize Log Insight user interface, click the Edit icon of the SFO01 to LAX01 destination.
    2. In the Edit Destination dialog box, click Add Filter and enter the following filter attributes.
      Filter Attribute Value
      Filter Type site
      Operator does not match
      Value LAX01
      Note: If you are unable to set the Filter Type, please wait 5-10 minutes for region B's logs to be forward to region A
  5. Click Save.

Results

The Event Forwarding page in the vRealize Log Insight user interface shows a summary of the forwarded events.