How to install VMware Log Insight 2.0
Log Insight is a fairly new product from VMware and has been getting some good attention since its release. It was just updated with version 2.0 and I thought it was time to write a few posts about it. In this one I will cover the base setup to get you up and running and collecting logs.
The install is started by downloading and deploying the Log Insight virtual appliance. I am not going to cover the appliance deployment since its like other VMware virtual appliances. To deploy all you must do is supply it with networking details or choose DHCP and follow the prompts. What I wanted to cover was the post appliance deployment steps and those are covered below.
Once the virtual appliance is deployed and powered on you will need to navigate to the appliance in the browser of your choice. The link should be similar to the one below. You will see the following page and only need to click on Next to get started.
The next step is to choose if this deployment will be a New Deployment or Joined to an existing deployment. In this walkthrough I am creating a new deployment.
In step 3 the process is starting for the new deployment. Nothing to exciting while we wait for the next step.
Next you will need to provide the credentials for the Admin user. This account will be used to setup the remaining steps of this install and you will need to create other logons.
You will now need to provide the license key for the install. Very simple just type or paste in your license key and click the Add License Key button.
Once the key is accepted you should see a screen like the one shown below. My license key was accepted and it shows the licensing model and the count. There are different types of licenses that offer Per Os, Per CPU or temporary licensing. These provide flexible options based upon your requirements.
This step just asks for an email or list of email addresses that will be used for system notifications.
Up next is the time configuration settings. The settings in the image below show the default values. NTP is an important item in the collection of logs. If time is not in sync in your environment you will have issues keeping things lined up. I would recommend that you use the same time source that you use for your vSphere hosts and other parts.
For the system to be able to send email notifications you will need to provide an SMTP server. This can be internal or external as long as the appliance can reach and authenticate with it.
We have reached step 10 and we are All Done. Well with this part, there are still a few steps before you are collecting any logs.
Before we can collect any logs from vCenter and hosts we must link them together. The following screen has a shortcut that will take you to the screen to link them together.
Step 12 shows how easy it is to connect to a vCenter. You simply need to provide the IP or DNS name and credentials. Then choose if you want to collect logs from vCenter, ESXi hosts or both with the check boxes on the right. Next click Save to create the link.
You will see the following screen while it makes the connection. The appliance will configure vCenter to send logs and then each of your hosts that are managed by the vCenter to send logs to Log Insight.
We have now completed the setup and linked Log Insight to at least one vCenter. There should already be some data imported into the system to start viewing reports. If you click the Dashboards item as shown in the image below. This will take you to a screen similar to the one shown below. Here you can select from a number of different views shown on the left side of the screen, that focus on different topics.
The other main view is the Interactive Analysis view. This can be reached by clicking on the selection shown in the image below. You can also reach this by drilling down into data in the previous views. This view allows you to see a more focused view of the data and review the actual log data in the lower part of the screen.
Last up how do you manage the configuration of the Log Insight appliance? You reach it from the Admin menu at the top right of the management page that we have been using. From here you can update the settings that we configured earlier, add or remove vCenters and other settings.
This was a base walkthrough for Log Insight to help get things installed and working. I am working on other posts to cover adding Content Packs for collection other data. I also have plans to write on how you can use for troubleshooting issues in your environment.
About Brian Suhr
Brian is a VCDX5-DCV and a Sr. Tech Marketing Engineer at Nutanix and owner of this website. He is active in the VMware community and helps lead the Chicago VMUG group. Specializing in VDI and Cloud project designs. Awarded VMware vExpert status 6 years for 2016 - 2011. VCP3, VCP5, VCP5-Iaas, VCP-Cloud, VCAP-DTD, VCAP5-DCD, VCAP5-DCA, VCA-DT, VCP5-DT, Cisco UCS Design