You enable the integrated load balancer (ILB) on the 3-node cluster so that all log sources can address the cluster by its ILB. By using the ILB, you need not reconfigure all log sources with a new destination address in a future scale-out. Using the ILB also guarantees that vRealize Log Insight accepts all incoming ingestion traffic.
vRealize Log Insight users, using both the Web user interface or API, and clients, ingesting logs by using syslog or the Ingestion API, connect to vRealize Log Insight using the ILB address.
A vRealize Log Insight cluster can scale out to 12 nodes, that is, 1 primary and 11 worker nodes.
|Decision ID||Design Decision||Design Justification||Design Implication|
|SDDC-OPS-LOG-001||In each region, deploy vRealize Log Insight in a cluster configuration of 3 nodes with an integrated load balancer: one primary and two worker nodes.||
|SDDC-OPS-LOG-002||Apply vSphere Distributed Resource Scheduler (DRS) anti-affinity rules to the vRealize Log Insight cluster components.||Prevents the vRealize Log Insight nodes from running on the same ESXi host and risking the high availability of the cluster.||