Using the vRealize Log Insight server, you can configure agents from within the application's user interface. Agents poll the vRealize Log Insight server regularly to determine if new configurations are available.

You can group agents that require the same configuration. For example, you might group all vRealize Log Insight Windows agents separately from the vRealize Log Insight Linux agents.

In the All Agents menu, existing agent groups from content packs are listed automatically. The agents listed relate to content packs that you have already installed (for example the vSphere content pack), which use agent groups. All user-created agent groups appear under Content Packs > Custom Content, when you click My Content or Shared Content.

A user with at least a view-only admin role can export content packs with the agent group templates.

  • You cannot use the same content pack template more than once.
  • Content pack groups are read-only.

Only configuration sections beginning with [winlog], [filelog], [journaldlog] and [parser] are used in content packs. Additional sections are not exported as part of a content pack. Only single-line comments (lines beginning with ; ) under the [winlog], [filelog], and [parser] sections, are preserved in a content pack.

Note: A single agent can belong to multiple agent groups and inherits all the settings from the centralized agent configuration.
You can create a configuration for the All Agents group as described in Create an Agent Group. If an agent is configured from the combination of a centralized agent configuration and another configuration, the agent configuration is a result of merging both the configurations. For more information about merging, see Agent Group Configuration Merging.
Note: Use agent groups whenever possible, and avoid using the All Agents configuration unless needed.

See Working with vRealize Log Insight Agents for information about configuring agents and merging local and server-side configurations.