You can use vRealize Log Insight to analyze unstructured or structured log data.

vRealize Log Insight accepts data from the following sources:

  • Sources that support sending log streams with the syslog protocol.

  • Sources that write log files and can run the vRealize Log Insight agent.

  • Sources that can post log data with HTTP or HTTPS through the REST API. See https://www.vmware.com/go/loginsight/api.

  • Historic data that was archived by vRealize Log Insight.

The vSphere log parser allows you to import vSphere log bundles in vRealize Log Insight.

Note:

Although vRealize Log Insight can handle historic data and real-time data simultaneously, you are advised to deploy a separate instance of vRealize Log Insight to process imported log files.

See Import a Log Insight Archive into vRealize Log Insight in Administering vRealize Log Insight.