VMware Cloud Community
capnfalkon
Contributor
Contributor

Finding a specific event in VRLI

In vCenter when an ESXI host has kicked the bucket you usualy get a "Host is not responding" Event error for that specific host. I just had a host like that failed and am trying to find this event via vRealize Log Insight in order to create an alert but I'm unable to. Does anyone have any idea what exactly to look for? Event type ID is vim.event.HostConnectionLostEvent.

Reply
0 Kudos
1 Reply
ramajay12345
Enthusiast
Enthusiast

1. If you configured the ESXI host(s) to send remote syslog to log Insight and you have time time stamp(when the host went to not responsding state.)
2. You can see the logs in Log Insight > Interactive Analysis.
3. in filters -> Hostname > ESXI name
4. New filter:- text > err*, crit*, fail* & warning.

https://docs.vmware.com/en/vRealize-Log-Insight/8.10/com.vmware.log-insight.administration.doc/GUID-...

Jayendra
Reply
0 Kudos