The vRealize Log Insight Windows agent collects events from Windows event channels and log files, and forwards them to the vRealize Log Insight server.

A Windows event channel is a pool for collecting related events in a Windows system.

In a Windows system, applications can store log data in flat text files on the file system. The vRealize Log Insight Windows agent can monitor directories and collect events from flat text log files.

The vRealize Log Insight Windows agent has a limit of 64 KB per request to the vRealize Log Insight server.

The vRealize Log Insight Windows agent runs as a Windows service and starts immediately after installation. During and after installation, you can configure the following options for the vRealize Log Insight Windows agent:

  • Select the target vRealize Log Insight server to which the vRealize Log Insight Windows agent forwards events.

  • Select the communication protocol and port that the vRealize Log Insight Windows agent uses.

  • Add additional Windows event channels from which the vRealize Log Insight Windows agent collects events.

  • Select Windows directories to monitor and add flat log files to the collection.

The vRealize Log Insight Windows agent requires Windows Vista or later, or Windows Server 2008 or later.

Verify that you have a copy of the vRealize Log Insight Windows agent .msi file. See Download Windows or Linux Agent Files