Log Insight integration with vROps

[RickVerstegen]

Log Insight and vROps have been setup correctly with integration. Now i would like to send alerts from Log Insight to vROps. For example an alert when SSH is enabled on ESXi hosts.

I've created the alert but it does not send the alert to vROps. It does not appear under All Alerts. Even when I use the button "send test alert to vRealize Operations" it does not appear in vROps under the Alerts section.

Anyone can point me in the right direction or help me how to fix this? Also can somebody tell me what the fallback option means? Do i need to specify an ESXi host which is applicable for the SSH Alert?

[MichaelRyom]

Not sure how to troubleshoot it. Best guess is to have a look at the Log Insight log files, on the appliance.

As for the second question, it is my understanding that vRops tries to "guess" based on the integration and object ID which object to add the alert to. IF it does not know where to add the alert it needs a fallback object to which the alert will be added.

I normally set the fallback object to vSphere world, but choose what best suite your organization

[daphnissov]

Didn't see your message until now. When I've seen this in the past, it's been because either DNS is set up properly and resolving, there is a drift between the supported versions in one product, or the integration didn't get cleanly set up properly. First thing I'd try is to back out the integration and reboot (if you can). Depending on your versions, there were some caveats to get the vRLI => vROps direction to work but I can't quite remember what they were. And Michael is certainly right about the fallback. But it doesn't guess. If the vROps integration is setup, vRLI can see the vROps ID as well as the vCenter UUID. It uses this to correlate the object in inventory. If this is absent (for one of several reasons), it can't associate the event with the correct object, so you have to explicitly define to what object that alert will be pinned. This is the purpose of fallback.

[RickVerstegen]

Thank you both for the reply. I will check it out asap.