You can monitor the status of the vRealize Log Insight Windows and Linux agents and view current statistics about their operation.
Only those agents that are configured to send data through CFAPI appear on the Agents page. Agents that are configured to send data through syslog appear on the Hosts page, as with other syslog sources. If protocol changes from CFAPI to syslog, stats are not updated and represented on the Statistics page and Agent status is shown as "disconnected". Data represented there is being sent from LI Agents every 30 sec. vRealize Log Insight can display information for up to 15,000 agents.
If you change protocol from CFAPI to syslog, statistics cease to be updated and represented on the Agent page anymore and agent status is shown as disconnected. Data represented there is being sent from vRealize Log Insight agent every thirty seconds.
Prerequisites
Verify that you are logged in to the vRealize Log Insight web user interface as a View Only Admin user, or a user associated with a role that has the relevant permissions.. See Create and Modify Roles for more information. The URL format of the web user interface is https://log-insight-host, where log-insight-host is the IP address or host name of the vRealize Log Insight virtual appliance.
Procedure
- ♦ Expand the main menu and navigate to Management > Agents.
Status information for each agent that sends data with CFAPI appears.
What to do next
You can use the information from the Agents page to monitor the operation of the installed vRealize Log Insight Windows and Linux agents. Click the agent hostname to go to the Explore Logs page for that host. After setting the hostname parameter from the LI Agent, and if default CFAPI proto is used and points to a Log Insight instance, you can monitor the connection by opening the Agents statistics page and verifying that the agent appears in the list of agents. You can use the links under the hostname column to navigate to the Insight Agents page and check the logs coming from the mentioned Agent.
