Do you have NSX content pack for log insight configured ? If you have the same , select one of the NSX object and you can switch to interactive analysis from there to the logs/events.
Yes we have installed NSX Content pack. When i search by Edge host name or by IP ,i see no logs coming from that device , all i see logs from NSX Manager . Another question is where can i see list of NSX Edges reporting to log-in-sight.
Please note those blue bar in the above snap are from NSX Manager .
Each NSX Edge syslog is configured as " log-in-sight Ip " . I can see connection Established on port 514 .
Sorry for the late reply , I can see dashboard is showing edge load balancer events . Have you enabled logging for LB ? And for firewall there is no logging , most likely because you are using default settings of "No logging option" , if logging is not working , all those tabs would be empty.
in loginsight just check the hosts that have connected to the syslog. Look for your edge and last time they sent something.
If the time is recent it means that they are sending data, all you need then is the content pack for nsx
You can see events the which should start to appear in the Log Insight dashboards.
If you have configured the syslog server then go to setting option of syslog and click to change option Get to Post in the drop down menu.
Then click the Body tab and select raw. Enter the following text, replacing LOG with the correct syslog server.
Click Send. T
It should show the status on dashboard.