You can set or change the target vRealize Log Insight server that the vRealize Log Insight Windows agent sends event to, if you have not set the values during the installation process.


  • Log in to the Windows machine on which you installed the vRealize Log Insight Windows agent and start the Services manager to verify that the vRealize Log Insightagent service is installed.

  • If you have a vRealize Log Insight cluster with an enabled Integrated Load Balancer, see Enable Integrated Load Balancer for custom SSL certificate specific requirements.


  1. Navigate to the program data folder of the vRealize Log Insight Windows agent.

    %ProgramData%\VMware\Log Insight Agent

  2. Open the liagent.ini file in any text editor.
  3. Modify the following parameters and set the values for your environment.




    Protocol that the agent uses to send events to the vRealize Log Insight server. The possible values are cfapi and syslog. Use the default cfapi setting.


    IP address or host name of the vRealize Log Insight virtual appliance.

    You can specify an IPv4 or IPv6 address. An IPv6 address can be specified with or without square brackets. For example:

    hostname = 2001:cdba::3257:9652
    hostname = [2001:cdba::3257:9652]

    If the host supports both IPv4 and IPv6 stacks and a domain name is specified as the hostname, then the agent will use the IP stack depending on the IP address that is returned by the name resolver. If the resolver returns both IPv4 and IPv6 addresses, than the agent will try to connect sequentially to both addresses in the given order.


    Communication port that the agent uses to send events to the vRealize Log Insight server. The default values are 9543 for cfapi with SSL enabled, 9000 for cfapi with SSL disabled, 6514 for syslog with SSL enabled and 514 for syslog with SSL disabled.


    Enables or disables SSL. The default value is yes.

    When ssl is set to yes, if you do not set a value for the port, the port is automatically picked up as 9543.


    The time in minutes to force reconnection to the server. The default value is 30.

    ; Hostname or IP address of your Log Insight server / cluster load balancer. Default:
    ; Protocol can be cfapi (Log Insight REST API), syslog. Default:
    ; Log Insight server port to connect to. Default ports for protocols (all TCP):
    ; syslog: 514; syslog with ssl: 6514; cfapi: 9000; cfapi with ssl: 9543. Default:
    ; SSL usage. Default:
  4. Save and close the liagent.ini file.


The following configuration example sets a target vRealize Log Insight server that uses a trusted certificate authority.


What to do next

You can configure additional SSL options for the vRealize Log Insight Windows agent. See Configure SSL Connection Between the Server and the Log Insight Agents.