VMware vRealize Log Insight Install and Configure

In the next few post we will be going through deploying and configuring vRealize Log Insight (vRLI).

Log Insight is a tool from VMware than can be used for log analytics, log management for both infrastructure / application and help with troubleshooting.

I have been looking at deploying this in production so though I would setup in my lab and see how it works and if it would be usefully to deploy in our production environment.

Below is the link to the minimum requirements for vRLI

Minimum Requirements (vmware.com)

Hardware Requirements

Below is the the required hardware depending the size selected

Preset SizeLog Ingest RateVirtual CPUsMemoryIOPSSyslog Connections (Active TCP Connections)Events per Second
Extra Small6 GB/day24 GB7520400
Small30 GB/day48 GB5001002000
Medium75 GB/day816 GB10002505000
Large225 GB/day1632 GB150075015,000

Network Port Requirements

The following network ports must be externally accessible

PortProtocol
22/TCPSSH
80/TCPHTTP
443/TCPHTTPS
514/UDP, 514/TCPSyslog
1514/TCPSyslog ingestion via SSL only
9000/TCPvRealize Log Insight Ingestion API
9543/TCPvRealize Log Insight Ingestion API (SSL)

Once all the requirement are checked we can start to deploy the appliance.

First step is to download the appliance OVA below is the link to the current

vRealize Log Insight | Log Analysis Tool | VMware

Create a new VM from VMware web client and upload the OVA file.

Select a datastore

This image has an empty alt attribute; its file name is image-1.png

Accept the license agreement

Select a network, deployment type and disk provisioning

Add in the hostname, IP address, gateway, DNS server and root password.

Review the setting to confirm all the settings are correct

The appliance will start to deploy

Once the install has finished it should show the DCUI, with the IP / hostname that was assigned during the deployment

Next we have to configure Log insight. Open a browser and either put in the DNS name if created or IP that was assigned to the appliance.

Click start new deployment

Set Admin credentials and email address.

Next screen will ask to put in a license, I will be using a trial license so this will only last for 60 days

Set the NTP settings.

Configure SMTP settings as required. To test if all settings are correct use the send test mail

Click finish to complete the install.

Next we will configure the vSphere integration.

Add in the vCenter details, click test connection to confirm the details are correct

Save vCenter configuration details.

vCenter server will now show and the collection status should show as collecting

In the next post we will go through configure AD integration and using the log insight dashboards.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s