vRealize Log Insight 4.5 is Now Live!

vRealize Log Insight 4.5 is Now Live!

 

On June 13th, 2017, VMware released vRealize Log Insight 4.5! vRealize Log lnsight delivers heterogeneous and highly scalable log management with intuitive, actionable dashboards, sophisticated analytics and broad third-party extensibility. It provides deep operational visibility and faster troubleshooting across physical, virtual and cloud environments. Below, you can fins a list of what’s new in this release of vRealize Log Insight 4.5!

Whats New?
This release of VMware vRealize Log Insight delivers product improvements and updates to the previous release, including these features:

Server Features

  • Added API to query alert execution and notification history
  • Added ability to specify basic authentication for webhooks
  • New product configuration APIs added
  • The source field is maintained when forwarding from vRealize Log Insight forwarder to a vRealize Log Insight server
  • Hosts on the /admin/hosts page can now be exported
  • Support for external load balancers has been deprecated
  • VMware Identity Manager (vIDM) is recommended for vRealize Log Insight. Native AD support is now deprecated. See the following Knowledge Base article for migration information: https://kb.vmware.com/kb/2148976

General User Interface Items

  • Dashboard legend mouse-over in one widget now highlights corresponding chart items across widgets
  • Added ability to show a given time across all dashboard chart widgets simultaneously
  • Separate options are available for descriptions and recommendations for user alerts.
  • User alert history for aggregation queries now includes count

Agent Items

  • Added ability to send unaltered raw syslog to destination server
  • Added ability for agent syslog parser to parse structured data (SD), PRI, PROCID, and MSGID syslog fields
  • Added auto-update checkbox option on MSI user interface
  • Added support for sending logs to multiple destinations
  • Added directory wildcard support
  • Added support for Photon OS
  • Support for Ubuntu 12.04 LTS has been deprecated

Content Packs

  • Updated General and vSphere content packs
  • VSAN and vROps content packs included out of the box

 

Technical Sales 201 – What’s New in vRealize Log Insight 4.3!

Technical Sales 201 – What’s New in

vRealize Log Insight 4.3!

 

In this enablement session, I provide a Technical Sales 201 level overview of the recent release of vRealize Log Insight 4.3. vRealize Log lnsight delivers heterogeneous and highly scalable log management with intuitive, actionable dashboards, sophisticated analytics and broad third-party extensibility. It provides deep operational visibility and faster troubleshooting across physical, virtual and cloud environments.

In vRealize Log Insight 4.3, we can sum up the improvements into the following areas…

  • Integration between vRealize Log Insight & vRealize Operations Manager.
  • VMware Identity Manager Single-Sign-On (SSO) support.
  • Automated Agent Upgrades.
  • Several chart enhancements.
  • New Agent features.
  • And Expanded Operating System support.

 

Technical Sales 201 – What’s New in vRealize Log Insight 4.3:   https://youtu.be/sh6IfnfdTkc

 

For more information on vRealize Log Insight 4.3…

[Webcast] Visibility Driven Progress with vRealize Log Insight

[Webcast] Visibility Driven Progress with vRealize Log Insight

[Webcast] Visibility Driven Progress with…

Looking for an easy way to gain visibility into your cloud infrastructure? Join the VMware Private Cloud team on 1/26 to see how vRealize Log Insight can help.


VMware Social Media Advocacy

Log Insight User Alerts from the VCOPS User

Log Insight User Alerts from the VCOPS User – via SFlanders.net

Log Insight User Alerts from the VCOPS User

In my last post, I covered the new user alerts administration page in Log Insight 4.0. On that page, you may have noticed alerts from the mysterious VCOPS_* user. In this post, I would like to explain why the VCOPS_* user may exist and why you should not modify alerts from that user. Read on to learn more!


VMware Social Media Advocacy

Log Insight 4.0 Available Now! – SFlanders.net

Log Insight 4.0 Available Now! – SFlanders.net

Log Insight 4.0 Available Now! – SFlanders.net

I am happy to announce the release of Log Insight 4.0. As always, this release has a ton of new features. Read on to learn more!


VMware Social Media Advocacy

Monitor Your DHCP Scopes With vRealize Log Insight

Monitor Your DHCP Scopes With vRealize Log Insight

 

30062816282_a056067c70

 

I’ve been spending some time lately figuring out ways to improve the monitoring and alerting within VMware’s Internal Horizon environments. A condition I wanted to alert on was DHCP scope exhaustion. We have many DHCP scopes globally for our virtual desktop environments and I want our support team to be alerted when we start to run low on DHCP IP addresses and in a worst case scenario, exhausted all IPs in the scope. Virtual desktops without IP addresses don’t tend to work very well.

In theory, we should never exhaust our DHCP scopes if we size and place our desktop Pools correctly. However, in practice that doesn’t always happen. Often a Pools get created with the wrong amount of desktops or the wrong network was selected on the Golden Master image, causing the new Pool to use the wrong DHCP scope. I want to know when these mistakes have been made, so we can correct them before our end users are affected.

Within our Horizon environments, we utilize vRealise Log Insight for log collect and analysis. My knowledge of Log Insight is still pretty primitive, so I engaged one of my OneCloud colleagues, Caleb Stephenson, who manages our Global Log Insight instance that processes 35 Billion events per week to figure out how we can achieve this. 

We use Windows based DHCP servers, so the first thing we needed to do was to figure out if the DHCP service logs the information we are looking for. Lucky in our case, it does. In two places. In the DHCP logs (C:\Windows\Sysnative\dhcp). However, these are only created daily, which wasn’t dynamic enough for our needs. The other place is in the Windows System Event Logs.

Below are a couple of screenshots of the System Log entries that we are interested in alerting against.

dhcp warningDHCP Out of IPs

 

So now we know where the data is, Caleb needed to figure out a way of capturing that information and alerting on specific conditions. I’m not going to go into depth on how this was achieved as Caleb documents it and also does a really good job of explaining the process on his blog post: Getting Fancy with Log Insight Alerting (aka. Monitoring DHCP pools via logs) However, I will share the high-level steps.

1. Collect the event logs from the DHCP Servers – By default the Log Insight Windows Agent collects events from the Application, System, and Security channels – Install and Configure the Log Insight Windows Agent

 

Continue Reading…Click Here!