Download the Log Insight virtual appliance. VMware distributes the Log Insight virtual appliance as an .ova file. Deploy the Log Insight virtual appliance by using the vSphere Client.

Verify that you have a copy of the Log Insight virtual appliance .ova file.

Verify that you have permissions to deploy OVF templates to the inventory.

Verify that your environment has enough resources to accommodate the minimum requirements of the Log Insight virtual appliance. See Minimum Requirements.

Verify that you read and understand the virtual appliance sizing recommendations. See Sizing the Log Insight Virtual Appliance.

1

In the vSphere Client, select File > Deploy OVF Template.

2

Follow the prompts in the Deploy OVF Template wizard.

3

On the Deployment Configuration page, select the size of the Log Insight virtual appliance based on the size of the environment for which you intend to collect logs.

Small is the minimum requirement for production environments.

Option

Log Ingest Rate

vCPUs

Memory

IOPS

Syslog Connections

Events per Second

Extra Small

3GB/day

2

4GB

75

20

200

Small

15GB/day

4

8GB

500

100

1000

Medium

37.5GB/day

8

16GB

1000

250

2500

Large

112.5GB/day

16

32GB

1500

750

7500

Note

If you select Large, you must upgrade the virtual hardware on the Log Insight virtual machine after the deployment.

4

On the Disk Format page, select a disk format.

Thick Provision Lazy Zeroed creates a virtual disk in a default thick format. Space required for the virtual disk is allocated when the virtual disk is created. The data remaining on the physical device is not erased during creation, but is zeroed out on demand at a later time, on first write from the virtual appliance.

Thick Provision Eager Zeroed creates a type of thick virtual disk that supports clustering features such as Fault Tolerance. Space required for the virtual disk is allocated at creation time. In contrast to the flat format, the data remaining on the physical device is zeroed out when the virtual disk is created. it might take much longer to create disks in this format than to create other types of disks.

Important

Deploy the Log Insight virtual appliance with thick provisioned eager zeroed disks whenever possible for better performance and operation of the virtual appliance.

Thin Provision creates a disk in thin format. The disk grows as the data saved on it grows. If your storage device does not support thick provisioning disks or you want to conserve unused disk space on the Log Insight virtual appliance, deploy the virtual appliance with thin provisioned disks.

Note

Shrinking disks on the Log Insight virtual appliance is not supported and might result in data corruption or data loss.

5

(Optional) On the Properties page, set the networking parameters for the Log Insight virtual appliance.

If you do not provide network settings, such as IP address, DNS servers, and gateway, Log Insight utilizes DHCP to set those settings.

Caution

Do not specify more than two domain name servers. If you specify more than two domain name servers, all configured domain name servers are ignored in the Log Insight virtual appliance.

Use comma to separate domain name servers.

6

(Optional) On the Properties page, set the root password for the Log Insight virtual appliance.

7

Follow the prompts to complete the deployment.

For information on deploying virtual appliances, see the User's Guide to Deploying vApps and Virtual Appliances.

After you power on the virtual appliance, an initialization process begins. The initialization process takes several minutes to complete. At the end of the process, the virtual appliance restarts.

8

Navigate to the Console tab and check the IP address of the Log Insight virtual appliance.

IP Address Prefix

Description

https://

The DHCP configuration on the virtual appliance is correct.

http://

The DHCP configuration on the virtual appliance failed.

a

Power off the Log Insight virtual appliance.

b

Right-click the virtual appliance and select Edit Settings.

c

Set a static IP address for the virtual appliance.

To enable SSH connections to the Log Insight virtual appliance, configure the root password in the virtual appliance console. See Configure the Root SSH Password for the Log Insight Virtual Appliance.

If you want to configure a standalone Log Insight deplpyment, see Configure New Log Insight Deployment.

The Log Insight Web interface is available at https://log-insight-host/ where log-insight-host is the IP address or host name of the Log Insight virtual appliance.