Supported Log Files and Archive Formats in vRealize Log Insight

You can use vRealize Log Insight to analyze unstructured or structured log data.

vRealize Log Insight accepts data from the following sources:

• Sources that support sending log streams with the syslog protocol.
• Sources that write log files and can run the vRealize Log Insight agent.
• Sources that can post log data with HTTP or HTTPS through the REST API. API documentation is available from vRealize Log Insight interface at https://<vRLI_host>/rest-api.
• Historic data that was archived by vRealize Log Insight.

The vSphere log parser allows you to import vSphere log bundles in vRealize Log Insight.

Note: Although vRealize Log Insight can handle historic data and real-time data simultaneously, you are advised to deploy a separate instance of vRealize Log Insight to process imported log files.

See Import a Log Insight Archive into vRealize Log Insight in Administering vRealize Log Insight.