Data archiving preserves old logs that might otherwise be removed from the Log Insight virtual appliance due to storage constraints. Log Insight can store archived data to NFS mounts.

Note

Log Insight does not manage the NFS mount used for archiving purposes. If system notifications are enabled, Log Insight sends an email when the NFS mount is about to run out of space or is unavailable . If the NFS mount does not have enough free space or is unavailable for a period of time greater than the retention period of the virtual appliance, Log Insight stops ingesting new data until the NFS mount has enough free space, becomes available, or archiving is disabled.

Verify that you have access to an NFS partition that meets the following requirements.

The NFS partition must allow reading and writing operations for guest accounts.

The mount must not require authentication.

The NFS server must support NFS v3.

Verify that you are logged in to the Log Insight Web user interface as an Admin user. The URL format is https://log-insight-host, where log-insight-host is the IP address or host name of the Log Insight virtual appliance.

1

Click the configuration drop-down menu icon and select Administration.

2

Under Configuration, click Storage.

3

Select the Enable Data Archiving check box, type the path to an NFS partition where logs will be archived, and click Test to verify the connection.

If data archiving is enabled, old log files are saved to the NFS partition.

4

Click Save.

Note

Data archiving preserves log events that have since been removed from the Log Insight virtual appliance due to storage constraints. Log events that have been removed from the Log Insight virtual appliance, but have been archived are no longer searchable. If you want to search archived logs, you must import them into a Log Insight instance. For more information about importing archived log files, see Import a Log Insight Archive into Log Insight.

After Log Insight restarts, verify that syslog feeds from ESXi continue to arrive in Log Insight. For troubleshooting, see ESXi Logs Stop Arriving in Log Insight.