You can configure the Webhook serve in vRealize Log Insight.

Procedure

  1. Log in to vRealize Log Insight and from the left pane, select Webhook under Alerts.
  2. On the Webhook page, click New Webhook to add a new webhook.
  3. Enter the required details.
    Name vRealize Network Insight Cloud Dropped Flow Alert
    Endpoint Custom
    Webhook URL Copied from vRNI add source page. For example, https://webhook_user:*****************@vrni-appliance/webhooks/loginsight/alert
    Content Type JSON
    Action Post
    Webhook Payload
    {
    "AlertType": 1,
    "AlertName": "${AlertName}",
    "SearchPeriod": ${SearchPeriod},
    "HitOperator": ${NumHits},
    "messages": ${messages}
    }
    
    Note: Ensure to add the Webhook payload exactly as given above.
  4. Update the /etc/hosts file to connect vRealize Network Insight Cloud with the Webhook server.
    Note: You must have the sudo/root permission to update the /etc/hosts file.
    For example,
    ssh root@10.253.241.105
    VMware vRealize Log Insight
    root@10.253.241.105's password: 
    Last login: Tue Jun 14 03:31:14 UTC 2022 from 172.31.1.73 on pts/0
    Last login: Tue Jun 14 09:15:08 2022 from 172.31.1.46
    root@vRLI-8 [ ~ ]# cat /etc/hosts
    # Begin /etc/hosts (network card version)
    # End /etc/hosts (network card version)
    # VAMI_EDIT_BEGIN
    # Generated by Studio VAMI service. Do not modify manually.
    127.0.0.1   vRLI-8 localhost
    10.253.241.206 vrni-appliance
    ::1   vRLI-8 localhost ipv6-localhost ipv6-loopback
    # VAMI_EDIT_END
    root@vRLI-8 [ ~ ]#