You can use vRealize Log Insight to analyze unstructured or structured log data.

vRealize Log Insight accepts data from the following sources:
  • Sources that support sending log streams with the syslog protocol.
  • Sources that write log files and can run the vRealize Log Insight agent.
  • Sources that can post log data with HTTP or HTTPS through the REST API. API documentation is available from vRealize Log Insight interface at https://<vRLI_host>/rest-api.
  • Historic data that was archived by vRealize Log Insight.

The vSphere log parser allows you to import vSphere log bundles in vRealize Log Insight.

Note: Although vRealize Log Insight can handle historic data and real-time data simultaneously, you are advised to deploy a separate instance of vRealize Log Insight to process imported log files.

See Import a Log Insight Archive into vRealize Log Insight in Administering vRealize Log Insight.