You can use vRealize Log Insight to analyze unstructured or structured log data.

Log Insight can accept data from:

Sources that support sending log streams via the syslog protocol. See the vRealize Log Insight as a Syslog Server section in Administering vRealize Log Insight.

Sources that write log files and can run the vRealize Log Insight agent. See the Overview of vRealize Log Insight Agents section in Working with vRealize Log Insight Agents.

Sources that can post log data via HTTP or HTTPS using the messages/inject API Service. See the Using messages/ingest Service section in Developer Resources for vRealize Log Insight.

Historic data that was archived by Log Insight. See the Import a vRealize Log Insight Archive into vRealize Log Insight section in Administering vRealize Log Insight.

Note

Although vRealize Log Insight can handle historic data and real-time data simultaneously, you are advised to deploy a separate instance of vRealize Log Insight to process imported log files.