VMware Cloud Community
touimet
Enthusiast
Enthusiast
‎03-01-2016 08:48 AM
Jump to solution

Log Insight (v3.0.1) Linux Agent install on VCSA v6??

Documentation has conflicting information as to whether or not to install the Log Insight Linux Agent on a version 6U1 vCenter Appliance.

Within Log Insight v3.0.1 the following statement indicates the Log Insight Agent should be installed:

pastedImage_0.png

Within the Log Insight 3.0 documentation the following indicates to just setup the syslog server within vCenter to forward to Log Insight server.  No mention of vCenter version and no mention of installing the Log Insight Linux Agent on the vCSA.

pastedImage_1.png

So I turn to google which just adds to the confusion...

William Lam's blog "A preview of native syslog support in VCSA 6.0" previews the setup of vCSA version 6 syslog forwarding logs to Log Insight.

However Steve Flanders blog "Log Insight Agent: Linux Configurations for Common Applications"  alludes to the installation of the Log Insight Linux Agent. 

Could anyone provide some clarity???  Is there a best practice method?  If installing the Agent is the best practice what does the agent provide over the native syslog in vCSA v6U1?

Thanks in advance!

Reply
1 Solution

Accepted Solutions
sflanders
Commander
Commander
‎03-01-2016 09:07 AM
Jump to solution

Either works -- the goal is just to get syslog to LI. The reason why LI says you must use the agent is because the vSphere content pack and more specifically the "vCenter Server - Application" dashboard requires the agent is order to work. If you use syslog-ng, you will still receive the events, but that vSphere content pack dashboard will not work. I hope this helps!

Hope this helps! === If you find this information useful, please award points for "correct" or "helpful". ===

View solution in original post

Reply
7 Replies
sflanders
Commander
Commander
‎03-01-2016 09:07 AM
Jump to solution

Either works -- the goal is just to get syslog to LI. The reason why LI says you must use the agent is because the vSphere content pack and more specifically the "vCenter Server - Application" dashboard requires the agent is order to work. If you use syslog-ng, you will still receive the events, but that vSphere content pack dashboard will not work. I hope this helps!

Hope this helps! === If you find this information useful, please award points for "correct" or "helpful". ===
Reply
touimet
Enthusiast
Enthusiast
‎03-01-2016 10:10 AM
Jump to solution

Excellent.  Makes sense and thank you for the response.  Couple quick question.... I assume if you do one method don't do the other, correct?   Would I use the Linux RPM install Agent for vCSA?

Thanks!

Reply
0 Kudos
sflanders
Commander
Commander
‎03-01-2016 10:11 AM
Jump to solution

Correct!

Hope this helps! === If you find this information useful, please award points for "correct" or "helpful". ===
Reply
0 Kudos
touimet
Enthusiast
Enthusiast
‎03-01-2016 10:12 AM
Jump to solution

sorry one last question... Would I use the Linux RPM install Agent for vCSA?

Reply
0 Kudos
sflanders
Commander
Commander
‎03-01-2016 10:14 AM
Jump to solution

Yes, VCSA is SLES based so the RPM would be the one to use.

Hope this helps! === If you find this information useful, please award points for "correct" or "helpful". ===
Reply
S_D
VMware Employee
VMware Employee
‎07-18-2016 04:19 PM
Jump to solution

These are the correct instructions for installing the Linux RPM Agent, correct Steve?  VMware vRealize Log Insight 3.0 Documentation Center

Reply
0 Kudos
admin
Immortal
Immortal
‎07-18-2016 04:24 PM
Jump to solution

Yes those are the correct instructions.

Reply
0 Kudos