Integrating vRA 8.x with vRLI 8.x

You can forward logs from vRealize Automation to vRealize Log Insight to take advantage of more robust log analysis and report generation.

vRealize Automation is bundled with a fluentd based logging agent. The agent collects and stores logs so that they can be included in a log bundle and examined later. You can configure the agent to forward a copy of the logs to a vRealize Log Insight server by using the vRealize Log Insight API. The supplied API allows other programs to communicate with vRealize Log Insight.

Log Insight. In a high availability (HA) environment, logs are tagged with different hostnames, depending on the node that they originated on. The environment tag is configurable by using the --environment ENV option as described below in the Configure or update integration of vRealize Log Insight section. In an HA environment, the environment tag has the same value for all log lines, regardless of the node they originated on.

Check the existing configuration of vRealize Log Insight

$ vracli vrli 
No vRLI integration configured

Configure vRA <--> vRLI Integration

Command

vracli vrli set [options] FQDN_OR_URL

Arguments

The following command-line arguments are available:

• FQDN_OR_URL - the FQDN or IP address of the vRealize Log Insight server that is to be used to post logs by using the vRealize Log Insight API configuration. Port 443 and an HTTPS scheme are used by default. If any of these settings must be changed, you can use a URL instead.

• options

  • --agent-id SOME_ID - Set the ID of the logging agent for this appliance. The default value is 0. Use to identify the logging agent for logs that are posted to vRealize Log Insight by using the vRealize Log Insight API configuration.

  • --environment ENV - set an identifier for the current environment. It will be available in vRealize Log Insight logs as a tag for each log line event. The default value is prod.

  • --ca-file /path/to/server-ca.crt - Specify a file that contains the certificate authority (CA) certificate that was used to sign the vRealize Log Insight server certificate. Force the logging agent to trust the specified CA and enable it to verify the certificate of the vRealize Log Insight server. The file can contain a whole certificate chain if needed to verify the certificate. In case of a self-signed certificate, pass the certificate itself.

  • --ca-cert CA_CERT - Specify a file in the same manner as --ca-file but pass the certificate (chain) inline as a string.

  • --insecure - Disable SSL verification of the server certificate. Force the logging agent to accept any SSL certificate when posting logs.

Command that I executed in my lab

 vracli vrli set https://labvrli.prem.com:9543 -e labvraenv --insecure -id labvra

Checking configuration post-execution

The moment I can see logs in my vRLI 8.x environment

Click here for the doco link