During vRealize Log Insight import, SDDC Manager configures the syslog servers for the NSX-T Manager instances automatically. Before importing vRealize Log Insight, you must remove the existing syslog servers from the NSX-T Manager instances.

Use the Postman application to remove the existing log forwarding on all NSX-T Managers in the region by sending a post request to each NSX-T Manager Request URL.
Table 1. NSX-T Managers in Region A

Type

Host Name

Request URL

Management

sfo-m01-nsx01a.sfo.rainpole.io

https://sfo-m01-nsx01a.sfo.rainpole.io/api/v1/node/services/syslog/exporters/syslog1

sfo-m01-nsx01b.sfo.rainpole.io

https://sfo-m01-nsx01b.sfo.rainpole.io/api/v1/node/services/syslog/exporters/syslog1

sfo-m01-nsx01c.sfo.rainpole.io

https://sfo-m01-nsx01c.sfo.rainpole.io/api/v1/node/services/syslog/exporters/syslog1

Workload

sfo-w01-nsx01a.sfo.rainpole.io

https://sfo-w01-nsx01a.sfo.rainpole.io/api/v1/node/services/syslog/exporters/syslog1

sfo-w01-nsx01b.sfo.rainpole.io

https://sfo-w01-nsx01b.sfo.rainpole.io/api/v1/node/services/syslog/exporters/syslog1

sfo-w01-nsx01c.sfo.rainpole.io

https:/sfo-w01-nsx01c.sfo.rainpole.io/api/v1/node/services/syslog/exporters/syslog1

Procedure

  1. Log in to the host machine that has access to your data center.
  2. Start the Postman application and log in.
  3. Configure the request headers and body.
    1. On the Authorization tab, enter the authorization details.

      Setting

      Value

      Type

      Basic Auth

      User name

      admin

      Password

      nsx-t_admin_password

    2. On the Headers tab, enter the header details.

      Key

      Value

      Content-Type

      application/json

    3. On the Body tab, select the Raw radio button, and from the Text drop-down menu, select JSON.
  4. Identify the current syslog configuration on each NSX-T Manager. 
    1. In the request pane, configure the following settings and click Send.

      Setting

      Value

      HTTP request method

      GET

      Request URL

      https://sfo-m01-nsx01a.sfo.rainpole.io/api/v1/node/services/syslog/exporters

      Body

      None

      When the NSX-T Manager appliance sends a response back, the Body tab contains the following message.

      {
        "_schema": "NodeSyslogExporterPropertiesListResult",
        "_self": {
          "href": "/node/services/syslog/exporters",
          "rel": "self"
        },
        "result_count": 1,
        "results": [
          {
            "_schema": "NodeSyslogExporterProperties",
            "_self": {
              "href": "/node/services/syslog/exporters/syslog1",
              "rel": "self"
            },
            "exporter_name": "syslog1",
            "level": "INFO",
            "port": 514,
            "protocol": "TCP",
            "server": "sfo-vrli01.sfo.rainpole.io"
          }
        ]
      }
    2. Verify that the server value is sfo-vrli01.sfo.rainpole.io and the exporter_name value is syslog1.
    3. Repeat this step for each of the remaining Management and Workload domain NSX-T Manager instances to Identify their current syslog configurations.
  5. Delete the syslog server on each NSX-T Manager instance.
    1. In the request pane, provide the URL query for the Management domain NSX-T Manager A and click Send.

      Setting

      Value

      HTTP request method

      Delete

      Request URL

      https://sfo-m01-nsx01a.sfo.rainpole.io/api/v1/node/services/syslog/exporters/syslog1

    2. Repeat this step for each of the remaining Management and Workload domain NSX-T Manager instances to delete its syslog configuration.