After installation, the liagent.ini file contains preconfigured default settings for the Log Insight Windows Agent.

[server]
proto=cfapi
hostname=LOGINSIGHT
port=9000
; Force agent reconnection every 30 minutes.
reconnect=30

[storage]
max_disk_buffer=200

[winlog|Application]
channel=Application

[winlog|Security]
channel=Security

[winlog|System]
channel=System

Parameter

Value

Description

proto

cfapi

The protocol that the Log Insight Windows Agent uses to send events to the Log Insight server. The possible values are cfapi and syslog. VMware recommends using the default cfapi setting.

hostname

LOGINSIGHT

The IP address or host name of the Log Insight virtual appliance.

port

9000

The communication port that Log Insight Windows Agent uses to send events to the Log Insight server. The default values are 9000 for cfapi and 514 for syslog

max_disk_buffer

200

The maximum disk space in MB that the Log Insight Windows Agent uses to buffer events and its own logs.

channel

Application, Security, System

The default Windows Event Log channels that the Log Insight Windows Agent collects. See Collect Events from Windows Events Channels