When vRealize Operations Cloud is integrated with vRealize Log Insight Cloud, you can send logs for supported objects to vRealize Log Insight Cloud. In vRealize Operations Cloud, you can search for these logs, view the logs for an object, and launch the vRealize Log Insight Cloud service.
- VMware vSAN clusters, Disks and Disk Groups
- ESXi hosts, and virtual machines
- NSX-T Services:
- Load Balancer Virtual Server
- Load Balancer Pool
- Load Balancer Service
- Logical Switch
- Logical Router
- Firewall Section
- Transport Zone
- Transport Node
- Edge Cluster
- Router Service
- Management Appliances
- Manager Cluster
- Load Balancers
- Manager Node
- NSX-T Manager Service
Integrating the Services
The integration of the vRealize Operations Cloud and vRealize Log Insight Cloud services happens automatically if you can access both the services.
If you are a VMware Cloud on AWS user, you do not have to deploy a cloud proxy. You also do not have to configure vCenter or an ESXi host, because audit and firewall logs for these objects are already available.
To publish the application or guest OS logs from a virtual machine, you must deploy a Log Insight Agent in the virtual machine. The agent helps forward the virtual machine guest OS logs to the cloud proxy for vRealize Log Insight Cloud. For information about Log Insight Agents and how to install and configure them, see Working with vRealize Log Insight Agents.
Searching for Logs
To search for logs from vRealize Operations Cloud, in the menu, select Home and then from the left pane, select . Use the search text box to find logs. You can also select a time range next to the search text box to find log events within the range. Time ranges are inclusive when filtering.
Viewing Logs for an Object
You can view logs for an object in one of the following ways:
- From the symptoms in the screen.
- By selecting an inventory object from the left pane of the Environment page, and clicking the Logs tab
You can troubleshoot a problem in your environment by correlating the information in the logs with the metrics, which might help you determine the root cause of the problem. By default, the Logs tab displays different event types for the last five minutes. For vSphere objects, the logs are filtered to show the event types for the object that you select and logs from supported objects within that hierarchy.
The supported objects are vSphere, vCenter, ESXi hosts, and virtual machines. The supported VMware vSAN objects are cluster, Disk Groups and Disks. If an object that is not supported has objects that are supported within its hierarchy, the enclosing object shows logs from the objects within its hierarchy. For example, if a cluster has ESXi hosts and virtual machines within its hierarchy, the cluster shows logs from ESXi hosts and virtual machines.
Using the vRealize Log Insight Cloud Service
To use the vRealize Log Insight Cloud service from vRealize Operations Cloud, select Home and then from the left pane, select . Click Launch Log Insight Cloud. From the Explore Logs page in vRealize Log Insight Cloud, you can create queries to extract events based on timestamp, text, and fields in log events. vRealize Log Insight Cloud presents charts of the query results.
For information about vRealize Log Insight Cloud, see the vRealize Log Insight Cloud documentation.