<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Alert for last received event in VMware Aria Operations for Logs Discussions</title>
    <link>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Alert-for-last-received-event/m-p/1408472#M1141</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I want to create an alert to let me know when the last received event from a host exceeds 24 hours. I can see this information under the Administration -&amp;gt; Management -&amp;gt; Hosts view, but I would prefer that an email alert be sent. Any help would be greatly appreciated, thanks.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 18 Jan 2018 13:58:13 GMT</pubDate>
    <dc:creator>GKleinow</dc:creator>
    <dc:date>2018-01-18T13:58:13Z</dc:date>
    <item>
      <title>Alert for last received event</title>
      <link>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Alert-for-last-received-event/m-p/1408472#M1141</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I want to create an alert to let me know when the last received event from a host exceeds 24 hours. I can see this information under the Administration -&amp;gt; Management -&amp;gt; Hosts view, but I would prefer that an email alert be sent. Any help would be greatly appreciated, thanks.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 18 Jan 2018 13:58:13 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Alert-for-last-received-event/m-p/1408472#M1141</guid>
      <dc:creator>GKleinow</dc:creator>
      <dc:date>2018-01-18T13:58:13Z</dc:date>
    </item>
    <item>
      <title>Re: Alert for last received event</title>
      <link>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Alert-for-last-received-event/m-p/1408473#M1142</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I wrote a &lt;A href="http://www.sovsystems.com/log-insight-and-alerting-when-there-are-no-more-logs-for-insight/"&gt;blog post&lt;/A&gt; about this problem which you should be able to use to adjust the time window to what you want. I also understand from a VMware employee on this forum that an alarm for when a host stops logging will be built into 4.6.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 18 Jan 2018 14:02:46 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Alert-for-last-received-event/m-p/1408473#M1142</guid>
      <dc:creator>daphnissov</dc:creator>
      <dc:date>2018-01-18T14:02:46Z</dc:date>
    </item>
    <item>
      <title>Re: Alert for last received event</title>
      <link>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Alert-for-last-received-event/m-p/1408474#M1143</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;If I am reading your document correctly it allows me to see when a server has sent the last event. I need to have a list of hosts that have not communicated with the Log Insight server in the last 24 hours.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 22 Jan 2018 17:44:48 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Alert-for-last-received-event/m-p/1408474#M1143</guid>
      <dc:creator>GKleinow</dc:creator>
      <dc:date>2018-01-22T17:44:48Z</dc:date>
    </item>
    <item>
      <title>Re: Alert for last received event</title>
      <link>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Alert-for-last-received-event/m-p/1408475#M1144</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;I'm not entirely sure I understand your question. You need the vRLI agent installed, and through the query described in my article it detects when it has not seen N number of messages. Therefore you need to have hosts that are reporting to vRLI and define which ones in the alert.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 22 Jan 2018 17:47:55 GMT</pubDate>
      <guid>https://communities.vmware.com/t5/VMware-Aria-Operations-for-Logs/Alert-for-last-received-event/m-p/1408475#M1144</guid>
      <dc:creator>daphnissov</dc:creator>
      <dc:date>2018-01-22T17:47:55Z</dc:date>
    </item>
  </channel>
</rss>

