Any Log Insight user can create a content pack for private or public usage.

Content packs are immutable or read-only plug-ins to Log Insight, that provide predefined knowledge about specific types of events, such as log messages. The goal of a content pack is to provide knowledge about a specific set of events in a format that is easily understandable by administrators, engineers, monitoring teams, and executives.

Content packs give information about the health status of a product or application. In addition, a content pack helps you understand how a product or an application works.

You can save a the information from a content pack by using either the Dashboards or Interactive Analytics pages in Log Insight. The information in a content pack includes:

Queries - usually a content pack contains at least three queries chart widgets for each dashboard, which means more than nine queries in total

Fields - a content pack should have at least twenty extracted fields

Aggregations

Alerts - each content pack contains at least five alerts

Dashboards - there are at least three dashboards in each content pack

By default, Log Insight ships with the VMware - vSphere content pack. You can import additional content packs if needed.