Documentation has conflicting information as to whether or not to install the Log Insight Linux Agent on a version 6U1 vCenter Appliance.
Within Log Insight v3.0.1 the following statement indicates the Log Insight Agent should be installed:
Within the Log Insight 3.0 documentation the following indicates to just setup the syslog server within vCenter to forward to Log Insight server. No mention of vCenter version and no mention of installing the Log Insight Linux Agent on the vCSA.
So I turn to google which just adds to the confusion...
William Lam's blog "A preview of native syslog support in VCSA 6.0" previews the setup of vCSA version 6 syslog forwarding logs to Log Insight.
However Steve Flanders blog "Log Insight Agent: Linux Configurations for Common Applications" alludes to the installation of the Log Insight Linux Agent.
Could anyone provide some clarity??? Is there a best practice method? If installing the Agent is the best practice what does the agent provide over the native syslog in vCSA v6U1?
Thanks in advance!
Either works -- the goal is just to get syslog to LI. The reason why LI says you must use the agent is because the vSphere content pack and more specifically the "vCenter Server - Application" dashboard requires the agent is order to work. If you use syslog-ng, you will still receive the events, but that vSphere content pack dashboard will not work. I hope this helps!
Either works -- the goal is just to get syslog to LI. The reason why LI says you must use the agent is because the vSphere content pack and more specifically the "vCenter Server - Application" dashboard requires the agent is order to work. If you use syslog-ng, you will still receive the events, but that vSphere content pack dashboard will not work. I hope this helps!
Excellent. Makes sense and thank you for the response. Couple quick question.... I assume if you do one method don't do the other, correct? Would I use the Linux RPM install Agent for vCSA?
Thanks!
Correct!
sorry one last question... Would I use the Linux RPM install Agent for vCSA?
Yes, VCSA is SLES based so the RPM would be the one to use.
These are the correct instructions for installing the Linux RPM Agent, correct Steve? VMware vRealize Log Insight 3.0 Documentation Center
Yes those are the correct instructions.