Configure each vCenter Server instance to forward system logs and events to vRealize Log Insight. After that, you can view and analyze all syslog information in the vRealize Log Insight user interface.

Table 1. vCenter Server Instances in Region A

Domain

Virtual Appliance Management Interface URL

Management

https://sfo01m01vc01.sfo01.rainpole.local:5480

Workload

https://sfo01w01vc01.sfo01.rainpole.local:5480

Procedure

  1. Redirect the log events from the vCenter Server instances to vRealize Log Insight.
    1. In a Web browser, log in to vCenter Server by using the Virtual Appliance Management Interface (VAMI).
      Setting Value
      URL https://sfo01m01vc01.sfo01.rainpole.local:5480
      User name root
      Password vcenter_server_root_password
    2. In the navigation pane, click Syslog.
    3. On the Forwarding configuration page, click Configure.
    4. In the Create forwarding configuration dialog box, enter these values and click Save.
      Table 2.

      Setting

      Value

      Server address

      sfo01vrli01.sfo01.rainpole.local

      Protocol

      TCP

      Port

      514
    5. Repeat these steps for the other vCenter Server instance by logging in to https://sfo01w01vc01.sfo01.rainpole.local:5480.
  2. Verify that the vCenter Server instances are forwarding their syslog traffic to vRealize Log Insight.
    1. In a Web browser, log in to vRealize Log Insight by using the user interface.
    2. In the vRealize Log Insight user interface, click Dashboards.
    3. In the left navigation pane, under Content pack dashboards, click VMware - vSphere > General Overview .
    4. Verify that the vCenter Server instances are presented on the All vSphere events by hostname widget.