jeffj2000
Enthusiast
Enthusiast

LogInsight appliance in separate datacenters, how to forward to each other?

If you have a single node configuration in separate datacenters, how you can you have them forward to each other so you can do analysis on whatever one you are logged into? I would assume forwarding to each other would get in some sort of loop? Just trying to setup something for DR sort off, where a single appliance in each of 2 datacenters can ingest logs from all services at their location, then forward to the other so you can have complete log analysis if you need? Thank you.

Reply
0 Kudos
ramajay12345
Enthusiast
Enthusiast

If you have Log Insights configured in two different datacenters/sites.

You can enable log forwarding for Site A to Site B log insights and Site B to Site A log insights.

Once you enable log forwarding you can do full log analysis

You will not lose any data even in case of planned activity / DR where one Site Log Insight is down.
Note: Logs will not be able to collect insight data if the environment is corrupted/integration fails. In that case, Log Insight will start collecting data again as soon as the environment returns to normal.

Please follow below docs:
https://docs.vmware.com/en/vRealize-Log-Insight/8.10/com.vmware.log-insight.administration.doc/GUID-...

Jayendra
Reply
0 Kudos
jeffj2000
Enthusiast
Enthusiast

Thank you for the comment. How you prevent a forwarding loop though?

Reply
0 Kudos
ramajay12345
Enthusiast
Enthusiast

Since the logs are not duplicate as each site is forwarding the logs to each other.
there should not be any loop.

Jayendra
Reply
0 Kudos