You can use the vRealize Log Insight Web user interface to configure the vRealize Log Insight Agents and the Ingestion API to allow only SSL connections to the server.
The vRealize Log Insight API is normally reachable through HTTP on port 9000 and through HTTPS on port 9543. Both ports can be used by the vRealize Log Insight Agent or custom API clients. All authenticated requests require SSL, but unauthenticated requests, including vRealize Log Insight agent ingestion traffic, can be performed with either. You can force all API request to use SSL connections. The option does not restrict syslog port 514 traffic or affect the vRealize Log Insight user interface, for which HTTP port 80 requests continue redirecting to HTTPS port 443.
Verify that you are logged in to the vRealize Log Insight web user interface as a user with the Edit Admin permission. The URL format is https://log-insight-host, where log-insight-host is the IP address or host name of the vRealize Log Insight virtual appliance.
- Navigate to the Administration tab.
- Under Configuration, click SSL.
- Under the API Server SSL, select Require SSL Connection.
- Click Save.
vRealize Log Insight API allows only SSL connections to the server. Non-SSL connections are refused.