If you have a single node configuration in separate datacenters, how you can you have them forward to each other so you can do analysis on whatever one you are logged into? I would assume forwarding to each other would get in some sort of loop? Just trying to setup something for DR sort off, where a single appliance in each of 2 datacenters can ingest logs from all services at their location, then forward to the other so you can have complete log analysis if you need? Thank you.
If you have Log Insights configured in two different datacenters/sites.
You can enable log forwarding for Site A to Site B log insights and Site B to Site A log insights.
Once you enable log forwarding you can do full log analysis
You will not lose any data even in case of planned activity / DR where one Site Log Insight is down.
Note: Logs will not be able to collect insight data if the environment is corrupted/integration fails. In that case, Log Insight will start collecting data again as soon as the environment returns to normal.
Please follow below docs:
https://docs.vmware.com/en/vRealize-Log-Insight/8.10/com.vmware.log-insight.administration.doc/GUID-...
Thank you for the comment. How you prevent a forwarding loop though?
Since the logs are not duplicate as each site is forwarding the logs to each other.
there should not be any loop.
