Before you configure Log Insight to collect alarms, events, and tasks data from your vSphere environment, you must connect Log Insight to one or more vCenter Server systems.

Log Insight can collect two types of data from vCenter Server instances and the ESXi hosts that they manage.

Events, tasks, and alerts are structured data with specific meaning. If configured,Log Insight pulls events, tasks, and alerts from the registered vCenter Server instances.

Logs contain unstructured data that can be analyzed in Log Insight. ESXi hosts or vCenter Server Appliance instances can push their logs to Log Insight through syslog.

For the level of integration that you want to achieve, verify that you have user credentials with enough privileges to perform the necessary configuration on the vCenter Server system and its ESXi hosts.

Level of Integration

Required Privileges

Events, tasks, and alarms collection

System.View

Note

System.View is a system-defined privilege. When you add a custom role and do not assign any privileges to it, the role is created as a Read Only role with three system-defined privileges: System.Anonymous, System.View, and System.Read.

Syslog configuration on ESXi hosts

Host.Configuration.Change settings

Host.Configuration.Network configuration

Note

You must configure the permission on the top-level folder within the vCenter Server inventory, and verify that the Propagate to children check box is selected.

Verify that you know the IP address or domain name of the vCenter Server system.

Verify that you are logged in to the Log Insight Web user interface as an Admin user. The URL format is https://log-insight-host, where log-insight-host is the IP address or host name of the Log Insight virtual appliance.

1

Click the configuration drop-down menu icon and select Administration.

2

Under Integration, click vSphere.

3

Type the IP address and credentials for a vCenter Server, and click Test Connection.

4

(Optional) To register another vCenter Server, click Add vCenter Server and repeat steps 3 through 5.

Note

Do not register vCenter Server systems with duplicate names or IP addresses . Log Insight does not check for duplicate vCenter Server names. You must verify that the list of registered vCenter Server systems does not contain duplicate entries.

5

Click Save.

Start collecting events, tasks, and alarms data from the vCenter Server instance that you registered. See Configure Log Insight to Pull Events, Tasks, and Alarms from vCenter Server Instance.

Start collecting syslog feeds from the ESXi hosts that the vCenter Server manages. See Configure an ESXi Host to Forward Log Events to Log Insight.