《vmwarevrealizeloginsight入门指》由会员分享,可在线阅读,更多相关《vmwarevrealizeloginsight入门指(20页珍藏版)》请在金锄头文库上搜索。
1、VMware vRealize Log Insight Getting Started GuidevRealize Log Insight 2.5This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document, see http:/ vRealize Log Insight
2、 Getting Started Guide2 VMware, Inc.You can find the most up-to-date technical documentation on the VMware Web site at:http:/ VMware Web site also provides the latest product updates.If you have comments about this documentation, submit your feedback to:Copyright 2014 VMware, Inc. All rights reserve
3、d. Copyright and trademark information.VMware, Inc. 3401 Hillview Ave. Palo Alto, CA 94304 ContentsVMware vRealize Log Insight Getting Started Guide51Before You Install Log Insight7 Supported Log Files and Archive Formats in Log Insight7 Security Requirements7 Product Compatibility8 Minimum Requirem
4、ents9 Sizing the Log Insight Virtual Appliance102Installing Log Insight11 Deploy the Log Insight Virtual Appliance11 Start New Standalone Deployment13 Join Existing Deployment153The Customer Experience Improvement Program17 Trace Data that Log Insight Collects17Index19VMware, Inc. 3VMware vRealize L
5、og Insight Getting Started Guide4 VMware, Inc.VMware vRealize Log Insight Getting Started GuideThe VMware vRealize Log Insight Getting Started Guide provides information about deploying and configuring VMware vRealize Log Insight, including how to size the Log Insight virtual appliance to receive lo
6、g messages from your environment.Intended AudienceThis information is intended for anyone who wants to install, configure, or maintain Log Insight. The information is written for experienced Linux system administrators who are familiar with virtual machine technology and datacenter operations.VMware
7、, Inc. 5VMware vRealize Log Insight Getting Started Guide6 VMware, Inc.Before You Install Log Insight1To start using Log Insight in your environment, you must deploy the Log Insight virtual appliance and apply several basic configurations.This chapter includes the following topics:n“Supported Log Fi
8、les and Archive Formats in Log Insight,” on page 7n“Security Requirements,” on page 7n“Product Compatibility,” on page 8n“Minimum Requirements,” on page 9n“Sizing the Log Insight Virtual Appliance,” on page 10Supported Log Files and Archive Formats in Log InsightYou can use Log Insight to analyse an
9、y unstructured or structured log files.If the source host has the capability to send log events over either the syslog protocol or HTTP, Log Insight can accept the data. To analyze historic data you can import log files that were archived by Log Insight.See the topic Import a Log Insight Archive int
10、o Log Insight in the VMware vCenter Log Insight Administration Guide.NOTE Although Log Insight can handle historic data and real-time data simultaneously, you are advised to deploy a separate instance of Log Insight to process imported log files.Security RequirementsTo ensure that your virtual envir
11、onment is protected from external attacks, you must observe certain rules.nAlways install Log Insight in a trusted network.nAlways save Log Insight support bundles in a secure location.For information about securing your virtual environment, see the VMware vSphere Security Guide and the Security Cen
12、ter on the VMware Web site.VMware, Inc. 7Product CompatibilityLog Insight collects data over the syslog protocol and HTTP, can connect to vCenter Server to collect events, tasks, and alarms data, and can integrate with vRealize Operations Manager to send notification events and enable launch in cont
13、ext . Check the VMware vRealize Log Insight Release Notes for latest updates on supported product versions.Virtual Appliance DeploymentYou must and deploy the Log Insight virtual appliance using vSphere. Always use a vSphere Client to connect to a vCenter Server. The Log Insight virtual appliance sh
14、ould be deployed on an ESX/ESXi host version 4.1 or later that is managed by vCenter Server version 4.1 or later.Syslog FeedsLog Insight collects and analyses syslog data over the following ports and protocols.n514/UDPn514/TCPn1514/TCP (SSL)You must configure environment components such as operating
15、 systems, applications, storage, firewalls, and network devices to push their syslog feeds to Log Insight.API FeedsThe Log Insight Ingestion API collects data over the following port and protocol.n9000/TCPvSphere IntegrationYou can configure Log Insight to pull data for tasks, events, and alarms tha
16、t occurred in one or more vCenter Server instances. Log Insight uses the vSphere API to connect to vCenter Server systems and collect data.You can configure ESXi hosts to forward syslog data to Log Insight.Table 1 1. Supported vSphere Product VersionsType of IntegrationSupported Product VersionsTasks, events, and alarms data collectionvCenter Server 5.1 and laterSyslog fe