You can use the command line to import logs that have been archived in Log Insight.

Note

Although Log Insight can handle historic data and real-time data simultaneously, you are advised to deploy a separate instance of Log Insight to process imported log files.

Verify that you have the root user credentials to log in to the Log Insight virtual appliance.

Verify that you have access to the NFS server where Log Insight logs are archived.

Verify that the Log Insight virtual appliance has enough disk space to accommodate the imported log files.

The minimum free space in the /storage/core partition on the virtual appliance must equal approximately 10 times the size of the archived log that you want to import.

1

Establish an SSH connection to the Log Insight vApp and log in as the root user.

2

Mount the shared folder on the NFS server where the archived data resides.

3

To import a directory of archived Log Insight logs, run the following command.

/usr/lib/loginsight/application/bin/loginsight repository import Path-To-Archived-Log-Data-Folder.
Note

Importing archived data might take a long time, depending on the size of the imported folder.

4

Close the SSH connection.

You can search, filter, and analyze the imported log events.