vRealize Log Insight agents collect events from log files on Linux and Windows machines and forward them to a vRealize Log Insight server or a third-party log management system.

You install agents on the event-generating device. Separate agents for Windows and Linux operating systems are provided.

Agents write their own operation logs. For Linux, the location is /var/log/loginsight-agent/liagent_*.log and for Windows the location is the C:\ProgramData\VMware\Log Insight Agent\logs directory. Log files are rotated when an agent is restarted or when the file reaches a size of 10 MB. A combined limit of 50 MB are kept in rotation.