First deployment. Lots of vCenter events not populating

[jedijeff]

Hello. I am doing my first deployment, running v4.30. My target vCenter is v6.5 VCSA. The integration account I am using is an account with a Read-Only role on the vCenter inventory object. I have a couple of ESXi v6 hosts as well in there to test.

I notice a lot of vCenter dashboards just not populating. And I have waited several days.

One is the VMware-vSphere, General-Security. I have been doing failed logins on the vCenter web client, and those attempts just dont show in vCenter Server failed log in attempts by source and user. When I do failed login attempts to an ESXi host against its UI client, the attempts show in ESX/ESXi failed log in attempts by source and user.

Even in the vCenter 6.5 dashboards I just cant see anything. I see some events from vCenter kind of scattered in different places, but I feel I am really missing a lot.

I read again about the integration, and it appears a Read-Only account is just fine. Thank you for any help.

[Texiwill]

Hello,

VRLI is great but only if you get the logs to VRLI from vCenter and vSphere. To ensure this is the case, go to the VAMI for vCSA and ensure syslog is pointed to the correct location. You can do this by going to vCSA:5480/ and logging in as your root user. Then check the 'syslog configuration'. Separately, you should also have all your vSphere nodes pointing to your VRLI cluster.

Best regards,

Edward L. Haletky

9 yr vExpert, Moderator, Author, Analyst, Consultant, Technologist

[jedijeff]

Thank you. I did all my ESXi hosts with syslog, that was done in the vSphere integration part in the Admin of Logsight. And that appears to work. Other than that I simply gave the vCenter readonly credentials to the integration and selected tasks, alarms, events. I didnt see in the documentation I had to send syslog too via VAMI in order to get most of the logs.

[Texiwill]

Hello,

Unfortunately, this is the only way that I know to get the proper logs into VRLI. The vCenter connectivity will periodically get events, but not setup logging. That you still have to do by hand.

Best regards,

Edward L. Haletky