When VMware vRealize Operations on AWS GovCloud (US) is integrated with VMware Aria Operations for Logs, you can send logs for supported objects to VMware Aria Operations for Logs. In VMware vRealize Operations on AWS GovCloud (US), you can search for these logs, view the logs for an object, and launch the VMware Aria Operations for Logs service.

Supported Objects

The following objects are supported for integration between VMware vRealize Operations on AWS GovCloud (US) and VMware Aria Operations for Logs:
  • vSphere
  • VMware vSAN clusters, Disks and Disk Groups
  • vCenter
  • ESXi hosts, and virtual machines
  • NSX-T Services:
    • Load Balancer Virtual Server
    • Load Balancer Pool
    • Load Balancer Service
    • Logical Switch
    • Logical Router
    • Firewall Section
    • Group
    • Transport Zone
    • Transport Node
    • Edge Cluster
    • Router Service
    • Management Appliances
    • Manager Cluster
    • Load Balancers
    • Manager Node
    • NSX-T Manager Service

Integrating the Services

The integration of the VMware vRealize Operations on AWS GovCloud (US) and VMware Aria Operations for Logs services happens automatically if you can access both the services and the logs for the supported objects contain the following fields:
  • A source field with a valid IP, and not an automated IP such as 169.x.x.x.
  • A hostname field.
For information about signing up for and getting started with each service, see the following topics:
If you are not a VMware Cloud on AWS user, you have to deploy a cloud proxy and then configure vCenter and an ESXi host to send logs for these objects to the cloud proxy for VMware Aria Operations for Logs. For information about configuring vCenter and ESXi, see:

If you are a VMware Cloud on AWS user, you do not have to deploy a cloud proxy. You also do not have to configure vCenter or an ESXi host, because audit and firewall logs for these objects are already available.

To publish the application or guest OS logs from a virtual machine, you must deploy a VMware Aria Operations for Logs Agent in the virtual machine. The agent helps forward the virtual machine guest OS logs to the cloud proxy for VMware Aria Operations for Logs. For information about VMware Aria Operations for Logs Agents and how to install and configure them, see Working with VMware Aria Operations for Logs Agents.

Searching for Logs

To search for logs from VMware vRealize Operations on AWS GovCloud (US), in the menu, select Troubleshooot > Log Analysis. Use the search text box to find logs. You can also select a time range next to the search text box to find log events within the range. Time ranges are inclusive when filtering.

Viewing Logs for an Object

You can view logs for an object in one of the following ways:

  • From the symptoms in the Troubleshoot > Alerts screen.
  • By selecting an inventory object from the left pane of the Environment > Object Browser page, and clicking the Logs tab.

You can troubleshoot a problem in your environment by correlating the information in the logs with the metrics, which might help you determine the root cause of the problem. By default, the Logs tab displays different event types for the last five minutes. For vSphere objects, the logs are filtered to show the event types for the object that you select and logs from supported objects within that hierarchy.

The supported objects are vSphere, vCenter, ESXi hosts, and virtual machines. The supported VMware vSAN objects are cluster, Disk Groups and Disks. If an object that is not supported has objects that are supported within its hierarchy, the enclosing object shows logs from the objects within its hierarchy. For example, if a cluster has ESXi hosts and virtual machines within its hierarchy, the cluster shows logs from ESXi hosts and virtual machines.

Using the VMware Aria Operations for Logs Service

To use the VMware Aria Operations for Logs service from VMware vRealize Operations on AWS GovCloud (US), select Troubleshooot > Log Analysis. Click Launch Log Insight Cloud. From the Explore Logs page in VMware Aria Operations for Logs, you can create queries to extract events based on timestamp, text, and fields in log events. VMware Aria Operations for Logs presents charts of the query results.

For information about VMware Aria Operations for Logs, see the VMware Aria Operations for Logs documentation.