Log Insight vApp sizing.

[jperry121]

Hi,

One of the environment i look after includes 15 vCenters, 760 Hosts, 10k VMs

Is it recommended to have 1 log insight instance per vCenter or 1 'big' instance to cover the whole environment.

what specs would you recommend for the 'big' instance, CPU, RAM, DISK SIZE, etc.

Thanks

John.

[sflanders · Accepted solution]

Log Insight 1.0 support a maximum of 750 directly attached devices or 7,500 events per second. Given the number of VMs, I would suggest one Log Insight instance per vCenter Server instance. In terms of sizing and resources see this document: VMware vCenter Log Insight 1.0 Virtual Appliance Sizing

Log Insight 1.5 beta is currently out and support similar scale. One difference is that during deployment you can specify the size of the virtual appliance based on the ingestion rate.

Scale-out for Log Insight is currently being worked on and is planned for a later release.

[jperry121]

Thanks for your suggestions.

[MattG]

Steve,

While you are recommending 1 Log Insight Appliance per vCenter,  can a single Log Insight Appliance act as a front end to all Log Insight instances?

How do multiple Log Insight instances align to the Multiple vCenters in vCops?

Thanks,

-MattG

[sflanders]

Hey Matt,

With 2.0, a lot has changed now that scale-out is supported. Given the above numbers, a single Log Insight cluster could handle the load. So point all vSphere environments to a single cluster. In terms of integration, LI to vSphere is 1:many and LI to vCOps is 1:many for alerts and 1:1 for launch in context. I hope this helps.