After installation, the liagent.ini file contains preconfigured default settings for the Log Insight Windows Agent.

[server]
hostname=LOGINSIGHT
; Log Insight server hostname or ip address
; If omitted the default value is LOGINSIGHT
;hostname=LOGINSIGHT

; Set protocol to use:
; cfapi - Log Insight REST API
; syslog - Syslog protocol
; If omitted the default value is cfapi
;
;proto=cfapi

; Log Insight server port to connect to. If omitted the default value is:
; for syslog: 514
; for cfapi without ssl: 9000
; for cfapi with ssl: 9543
;port=9543

;ssl - enable/disable SSL. Applies to cfapi protocol only.
; Possible values are yes or no. If omitted the default value is yes.
;ssl=no

; Time in minutes to force reconnection to the server
; If omitted the default value is 30
;reconnect=30

[storage]
;max_disk_buffer - max disk usage limit (data + logs) in MB:
; 100 - 2000 MB, default 200
;max_disk_buffer=200

[logging]
;debug_level - the level of debug messages to enable:
;   0 - no debug messages
;   1 - trace essential debug messages
;   2 - verbose debug messages (will have negative impact on performance)
;debug_level=0

[winlog|Application]
channel=Application

[winlog|Security]
channel=Security

[winlog|System]
channel=System

Parameter

Value

Description

proto

cfapi

The protocol that the agent uses to send events to the Log Insight server. The possible values are cfapi and syslog. VMware recommends using the default cfapi setting.

hostname

LOGINSIGHT

The IP address or host name of the vRealize Log Insight virtual appliance.

port

9543

The communication port that the agent uses to send events to the vRealize Log Insight server. The default values are 9543 for cfapi with SSL enabled, 9000 for cfapi with SSL disabled and 514 for syslog

ssl

no

Enables or disables SSL. The default value is no. Applicable to cfapi only.

max_disk_buffer

200

The maximum disk space in MB that the Log Insight Windows Agent uses to buffer events and its own logs.

debug_level

0

Defines the log details level. See Define Log Details Level in the Log Insight Agents.

channel

Application, Security, System

The default Windows Event Log channels that the Log Insight Windows Agent collects. See Collect Events from Windows Events Channels