HIBRIDNI OBLAK MODUL 5

MODULE 5 - VREALIZE LOG INSIGHT AND

VCLOUD DIRECTOR (30 MINUTES)
This module contains the following lessons:

Introduction
vRealize Log Insight Overview

Configuring for vCloud Director

Viewing vCloud Director Log Data

Conclusion

INTRODUCTION
vRealize Log Insight and vCloud Director

VMware vRealize Log Insight gives administrators the ability to

consolidate logs, monitor and troubleshoot vSphere and third-party
infrastructure, and perform security auditing, compliance testing,
log querying, aggregation, correlation, and retention. The vRealize
Log Insight virtual appliance includes a syslog server, log
consolidation tool, and log analysis tool that will work for any type of
device that can send syslog data. vRealize Log Insight
administrators can also create custom dashboards based on saved
queries that can be exported, shared, and integrated with vCenter
Server and VMware vRealize Operations Manager to provide a
uniform approach to dashboard monitoring and operational
management.

This module includes:

vRealize Log Insight Overview - Learn some of the basics of vRealize

Log Insight.

Configuring for vCloud Director - Learn how to configure the vCloud

Director Agent in Log Insight

Viewing vCloud Director Log Data - Learn how to view vCloud

Director logging data in both the dashboards and Interactive
Analytics.

VREALIZE LOG INSIGHT OVERVIEW

HIBRIDNI OBLAK MODUL 5

This lesson will cover an overview of Log Insight and how vCloud
Service Providers may benefit from it.

LAUNCH CHOME BROWSER

Click to enlarge

If it's not already open, launch the Chrome browser from the
Windows Quick Launch taskbar.

OPEN VREALIZE LOG INSIGHT

Click to enlarge

Click the vRealize Operations shortcut on the bookmarks bar. Login

as:

User name: admin

Password: VMware1!
HIBRIDNI OBLAK MODUL 5

Click to enlarge

01:03:07 EXTEND END

NAVIGATION
HIBRIDNI OBLAK MODUL 5

Click to enlarge

When you first log in to vRealize Log Insight, you'll see Dashboards
(1) and Interactive Analytics (2) at the top of the window. There's a
left-hand navigation pane (3) to help navigate each section.
Administration can be accessed in the upper right-hand corner (4).

DASHBOARDS
HIBRIDNI OBLAK MODUL 5

Click to enlarge

Dashboards are a quick way to see a graphic representation of the

logging data being received by vRealize Log Insight. Some
dashboards are built-in (General and vSphere) and some are added
by Content Packs. You can even build your own custom dashboards.
Click through some of the dashboards to see what kind of logging
data we have in the lab (many of the widgets may be empty due to
the fact that this is a closed lab environment and there isn't much
activity).

INTERACTIVE ANALYTICS
HIBRIDNI OBLAK MODUL 5

Click to enlarge

Click on the Interactive Analytics tab at the top of the window.

Interactive Analytics is where you can search against all logging

data being received by vRealize Log Insight. You can create simply
search (1) using alpha-numeric seach strings (things like hostname,
IP address, error name or number, etc.). You can add filters (2) to
better narrow the search. You can change the timeframe of your
search (3). As your search narrows, you can try filtering futher by
clicking on the links in the events (4) or by seeing what fields (5) are
coming back.

Try searching for some logging data. Some good things to look for
might be "error" or "192.168.110.10". If you don't get any results, try
changing the time to "All time".

DOING MORE WITH QUERIES

Click to enlarge
HIBRIDNI OBLAK MODUL 5

If you create a query that you'd like to use in the future, you can
save it by clicking the star icon (1).

You can also use queries to populate charts and graphs in your own
custom dashboards (2).

If you'd like to create an alert based on certain logging data, you can
click the bell icon (3).

The last icon (4) lets you export or share the query.

ADMINISTRATION

Click to enlarge

To access the Administration section, click on the three lines in the

upper right-hand corner and select Administration.

The Administration section allows you to do things like see status of

the vRealize Operations cluster, configure access control, configure
agents, etc.
01:02:05 EXTEND END

CONTENT PACKS
HIBRIDNI OBLAK MODUL 5

Click to enlarge

To access the Content Packs section, click on the three lines in the
upper right-hand corner and select Content Packs.

The Content Packs section allows you to add new content packs and
update existing content packs using the Content Pack Marketplace
(this lab doesn't have access to the Internet, so you won't be able to
see the Content Pack Marketplace). You can also see which Content
Packs are already installed. If you download a Content Pack from the
VMware Solution Exchange website, you can import it using the
Import Content Pack link at the bottom of the left-hand navigation
pane.

CONFIGURING FOR VCLOUD DIRECTOR

This section will show how to configure vRealize Log Insight for use
with vCloud Director.

VCLOUD DIRECTOR CONTENT PACK

HIBRIDNI OBLAK MODUL 5

Click to enlarge

In the Content Pack section, click on the vCloud Director content

pack. This is where you can see general information about the
content pack. Click the gear icon in the upper right-hand corner and
select Setup Instructions...

SETUP INSTRUCTIONS
HIBRIDNI OBLAK MODUL 5

Click to enlarge

The Setup Instructions explain how to configure the vCloud Director

Log Insight Agent (recommended). You can also configure the Log4J
Appender using the instructions from the KB article referenced.
Click OK when you're done reading.

GO TO ADMINISTRATION

Click to enlarge
HIBRIDNI OBLAK MODUL 5

Click on the three lines in the upper right-hand corner and select
Administration.

ADMINISTRATION > AGENTS

Click to enlarge

Click on Agents (1) in the left-hand navigation pane. Then click

the All Agents dropdown menu (2) and select vCloud Director Cell
Servers (3).

VCLOUD DIRECTOR AGENT SETTINGS

HIBRIDNI OBLAK MODUL 5

Click to enlarge

The vCloud Director Cell Server agent has default settings

configured for collecting the right log files from a vCloud Director
Cell Server. It needs a filter to know which server(s) to apply those
settings to. For our lab, we configured the IP address (1).

When the Log Insight server starts receiving data from the agent, it
will show up as an active agent (2).

SAVE AGENT

Click to enlarge

Scroll down to see the agent settings. Once a change has been made
to the filter (like adding an IP address), you can click the Save Agent
Group button (1).
HIBRIDNI OBLAK MODUL 5

Once the agent has been configured, download the Log Insight Agent
(2).

Once the agent is downloaded, you can copy it over to your vCloud
Director server(s) and install it. Sometimes it takes some work to get
the agent working properly. In our lab environment, we had to make
changes to the port and ssl settings for the agent to work properly.
Those changes were made directly on the vCloud Director server by
modifying the .ini file the agent uses.

VIEWING VCLOUD DIRECTOR LOG DATA

Once the vCloud Director Agent is configured properly and it sending
data to Log Insight, you should start to see vCloud Director logging
data show up in Interactive Analytics and Dashboards.

INTERACTIVE ANALYTICS

Click to enlarge
HIBRIDNI OBLAK MODUL 5

Click on the Interactive Analytics (1) tab and search for the IP
address of the vCloud Director server (2):
192.168.110.40

If you don't see any events, you may need to change the time range
(3).

VCLOUD DIRECTOR DASHBOARDS

Click to enlarge

Click on the Dashboards (1) tab and select the VMware - vCloud
Director (2) dashboards. Click through the different dashboards to
see what they look like.

If you don't see any data, you may need to change the time range (3).

Bonus: if you want, you can go to vCloud Director in another browser

tab and deploy a new VM or vApp in T1. Then come back to Log
Insight and see what kind of logging data you get.
 HIBRIDNI OBLAK MODUL 5

CONCLUSION
You should now be familiar with the basics of vRealize Log Insight
and how to configure it to collect logging data from vCloud Director.

YOU'VE FINISHED MODULE 5

Congratulations on completing Module 5.

If you are looking for additional information on using vRealize Log

Insight in a service provider environment, try this whitepaper on
architecting a vRealize Log Insight Solution from the vCloud
Architecture Toolkit for Service Providers (vCAT-SP):

https://tinyurl.com/y7gzylo8

Proceed to any module below which interests you most.

Module 1 - Intro to vCloud Director (30 minutes) (Basic)

Module 2 - vCloud Director Consumption (15 minutes) (Basic)

Module 3 - vSAN with vCloud Director (30 minutes) (Basic)

Module 4 - vRealize Operations with vCloud Director (45 minutes)

(Intermediate)

Module 6 - vRealize Log Insight with vCloud Director (30 minutes)

(Basic)

Module 7 - vCloud Availability (30 minutes) (Basic)

HOW TO END LAB

Click to enlarge

To end your lab click on the END button.