I'm running the following;
vrops Version 6.0.1.2523163
log insight Version 2.5.0-2629935
I installed the v1.0 vROps 6.x content pack in Log Insight and used this very helpful article when configuring the liagent.ini file
vRealize Operations Manager Content Pack for Log Insight - VMware Blogs
Everything seemed to be going well, but the end result is no data from vrops in LI, and connection errors in the agent logs with no clear indication of why the agent isn't connecting.
Viewing the log file I can see a lot of counters showing date, the agent up time is showing that it’s been running for a few days now with over 8 million observed events.
However, the dropped events number matches the 8 million observed events number meaning everything is being dropped “due to local storage overflow or rejected by the server” as the section states.
2015-08-23 17:07:16.704273 0x00007f770ffff700 <trace> CFApiTransport:348 | Re-connecting to server vrops.domain.local:9000
2015-08-23 17:07:16.762633 0x00007f770ffff700 <error> CurlConnection:482 | CurlConnection::Config transport error: Couldn't connect to server
2015-08-23 17:07:16.762664 0x00007f770ffff700 <trace> CFApiTransport:328 | DoConnectJob [Postpone connection by 167 sec]
Agent Up Time 134:15:34.106000
Observed Events : 8,176,438 (total events seen for all log sources since Agent started or changed server)
Collected Events: 0 (=Observed-Dropped)
Sent Events : 0 (delivered to destination server)
Dropped Events : 8,176,438 (dropped due to local storage overflow or rejected by the server)
Sending Rate : 0.00 EPS (average for last minute)
DB File Size : 143,576,064 bytes
CPU Usage : 0 % (average for last 900 seconds)
Connection : cfapi://vrops.domain.local:9000
Hostname (FQDN) : vrops.domain.local
Disk Space Used : 191,429,376 bytes
Two things I thought might be to blame that I'm not sure how to fix:
According to this article it says, "If syslog export is configured then the specific agent configuration required is not set and the syslog protocol is used instead of the cfapi. It is also very important to note that configurations can and will be overridden! For example, if you configure the agent to work with the content pack client-side (eg. liagent.ini) and later someone configures syslog export from the UI, the client-side agent configuration will be overridden with the UI settings breaking the content pack integration."
vRealize Operations Manager Content Pack for Log Insight - SFlanders.net
Since syslog export was apparently set when I first tried to configure this it would make sense that this is what is causing problems, but how would I then fix it? Especially when the UI won't let me disable syslog export on vrops?
Any and all help is appreciated. Thank you
Very helpful -- I believe the issue is with the [server] section if your configuration. What is the hostname= set to? Is it resolvable? The reconnect log messages are expected the postpone connection makes it sound like the hostname configuration is wrong.
Very helpful -- I believe the issue is with the [server] section if your configuration. What is the hostname= set to? Is it resolvable? The reconnect log messages are expected the postpone connection makes it sound like the hostname configuration is wrong.
that was it! I had a single character missing from the hostname. Thank you so much for the help.
Excellent, I am glad it is working for you now!
