VMware vCenter Log Insight

VMware vCenter Log Insight is the solution of the automated analysis of Big Data.

2016

vRealize Log Insight 4.0

On October 18, 2016 the VMware company provided vRealize Log Insight 4.0. The release of the solution on management of magazines of registration and to their analysis contains control function by notifications.

This version will have idle time in use the interface with the upgraded design. In a product there are integration tools with vSphere 6.5.

vRealize Log Insight 3.6

On August 14, 2016 the VMware company announced release of version 3.6 of the solution Log Insight^[1].

Possibilities of Log Insight 3.6:

• Enhanced Alerting is alerta which are sent to vRealize Operations Manager, now contain the same metadata, as notifications by e-mail.
• There was a possibility of Auto Cancel Alerts - when the alerta transferred to vRealize Operations Manager can be set in autocancelling in 10 minutes after their emergence.
• Requests on types of an event and trends can remain on a panel now, include them in content pack ices.
• There were user alerta on types of events.
• There was an opportunity to provide high availability at integration with vRealize Operations Manager means of Integrated Load Balancer virtual IP.
• Improvements of Syslog Event Forwarding - transfer with tags (forward complementary tags) is supported now:
• The point Upgrade Instructions on updating of content pack ices was added to the solution Log Insight.
• Possibility of package removal of fields in content pack ices.
• Improvement of the parser of logs and simplification of a configuration of agents. Now the configuration of the agent is set by a set of parameters.

Improvements of a content pack ice for vSphere.

Now it is possible to collect and analyze parameters:

• Requests for logs: vm downtime, precopyBandwidth, precopyStunTime.
• Groups of agents for vSphere logs logs (gc logs do not gather any more).
• There were widgets for Replicated VMs, Recovered VMs, Upgraded VMs.

Screenshot of the software window, (2016)

Panels, for example, of vCenter Server are added.

The experimental accessibility of the superuser to data and configurations of other users with an opportunity to change them.

Possibility of autoupdating of agents, starting with the version of vRLI 3.6 (Agent Auto-Upgrade).

There was an experimental integration into the solution VMware Identity Manager (vIDM), possibilities of an end-to-end input in the managing Single Sign-On (SSO) console are available now.

Announcement of Log Insight of version 3.3

On February 23, 2016 the VMware company announced^[2] product output of VMware vCenter Log Insight of version 3.3].

As a part of the upgraded opportunities of VMware vRealize Log Insight 3.3:

• Several addresses Virtual IP (VIP) with tagging or without it.
  • the Integrated balancer of vRealize Log Insight 3.3 allows to configure several virtual addresses the VIP with one or several tags or without them now. It allows to tag the incoming traffic and simplifies setup of a role model of access for devices in which there is no agent of Log Insight. Besides, it significantly increases performance.

Screenshot of an application window (2016)

• Webhooks support
  • Now system and user notifications can be sent via the webhooks mechanism, it allows to configure integration with such systems as Socialcast, PagerDuty or custom channel RSS/Atom.

Also notification through webhooks can be configured during creation of the new alert or editing existing (it is also possible to test alert at once, having sent the test):

• The improved integration into the VMware vSphere platform
  • For components VMware vCenter ESXi tags by analogy with a possibility of Multiple VIP with Tags described in the first point can be also added.

Not configured hosts of ESXi can be added to integration with vSphere by default.

• Support of additional OVF properties
  • For the virtual module Log Insight DNS searchpath and DNS domain properties can be configured.

• Improvements of agents of Log Insight
  • parsers for formats are added:
    • LTSV (Labeled Tab-Separated Values)
    • Regex
    • Syslog

  • the full support of IPv6 protocol appeared.
  • support of copytruncate for Linux systems appeared.
  • support of Windows 10 appeared.

• API are added.
  • Authentication API is the interface for authorization in Log Insight for the purpose of further execution of operations.
  • Query API is a possibility of requests to Log Insight and obtaining information, including in the aggregated type.
  • the Importer Utility utility, it allows to import old a log through Log Insight ingestion API.

• opportunities in the status Tech Preview.

The VMware company entered several additional opportunities with which it is possible to get acquainted in the experimental mode into Log Insight 3.3.

Agent Configuration Builder This component allows to look at a configuration of the agent and to recompile it with the necessary parameters.

The virtual module VMware Log Insight 3.3 can be completely configured with IPv6 settings. The structure of the platform includes different Configuration APIs which can be tested in the mode of the technology preview.

For February 24, 2016 there are no data on availability of an update of a product.

2014

VMware vRealize Log Insight 2.5

On October 14, 2014 the VMware company provided VMware vRealize Log Insight 2.5 — technology of new opportunities of access control on the basis of a role model.

VMware vRealize Log Insight (the former name VMware vCenter Log Insight) provides the analysis of magazines in real time using mechanisms of machine learning, high-performance search and troubleshooting in physical, cloud and virtual environments.

Expanded integration of VMware vRealize Log Insight 2.5 and VMware vRealize Operations will help the organizations to combine and analyze the structured and unstructured data, providing a full stroke of operational management. It will allow to improve the overall performance of IT and to prevent failures. The new release will include possibilities of access control on the basis of roles, helping customers to limit access to registers according to organizational functions.

VMware vCenter Log Insight 2.0

On July 1, 2014 the VMware company announced an exit of the updated product VMware vCenter Log Insight 2.0 for the automated analytics and work with files of magazines.

In the new version of VMware vCenter Log Insight machine learning technologies, along with the upgraded techniques of request processing and data collection, accelerating the problem resolution and continuing automation of IT processes in physical, virtual and hybrid mediums are used.

A system provides new opportunities, the increased performance and scalability.

VMware vCenter Log Insight helps to reveal problems 25% faster, and to solve them 50% faster while time for the analysis of magazines is reduced on ^[3]. In this version of VMware vCenter Log Insight 2.0 offers new opportunities and improvements:

• Intelligent Grouping — the new technology based on machine learning automatically groups the connected data, helping administrators to find quicker problems and to solve them;

• Query Performance — the speed of accomplishment of requests becomes 6 times higher in comparison with the leading solution in the market (according to internal tests) and allows to achieve the new level of work of administrators and service staff of IT systems;

• Data Ingestion — the speed of data collection increased by 8 times in comparison with the previous version of a product leads to radical acceleration of work with a large number of physical, virtual and cloud environments of the customer;

• Data Visualization is new opportunities for data visualization in the form of tables and schemes give to administrators additional tools of the analysis of unstructured magazines;

• Extensibility — the new agent for Microsoft Windows collects files of magazines from the PC and servers running the operating system Windows, allowing customers to analyze data of magazines in all environments.

VMware vCenter Log Insight allows to detect unstructured arrays of machine data from category Big Data in real time and to trace the data arriving from applications, virtual infrastructures and the physical equipment, helping to increase operational efficiency, to facilitate elimination of problems in IT systems. Being simple in installation and operation, VMware vCenter Log Insight provides the high levels of performance and scalability necessary for IT departments for visualization and the analysis of terabyte data sets. Integration of VMware vCenter Log Insight and VMware vCenter Operations Management Suite allows combination and the analysis, as structured, and unstructured data for full control over IT processes. New sets of the Content Pack expansions provide the increased transparency for bigger quantity of physical and virtual environments

Except existence of the built-in instruments of monitoring of VMware vSphere, VMware vCenter Log Insight expands possibilities of the analysis of magazines for the program and hardware systems that often meet in virtual and hybrid cloud environments.

VMware vCenter Log Insight 2.0 is available to loading on the website of vendor.

The cost of VMware vCenter Log Insight of $2.0 — 200 for OS copy without restrictions for volume of the stored logs licensing at the price of $1.5 thousand for one processor Is also possible.

VMware vCenter Log Insight 2.0 beta

On March 26, 2014 the VMware company in network corporate supervisory center of versions announced a release of the beta of a product of automated management of files of magazines (logs) - VMware vCenter Log Insight 2.0 beta.

Among the most notable changes and additions:

• The improved scalability and performance in clusters
  • Improvement of an exchange rate till 5-10 times during the work in the cluster mode
  • Uniform point of entry of the user for work with data

• Pro-active analytics
  • the Trained type system of events and recognitions of data schemes with intellectual grouping
  • "Smart fields" in reports

• The improved infopanel
  • Simple adding of filters on the fly
  • Possibility of interaction between different widgets of one deshbord

• Support of RESTful API during the work with logs
• The improved mechanisms of monitoring of own status

• The agent for collecting of logs of Windows
  • Redirects Windows event logs
  • Monitors changes of log files
  • Functions of the centralized reporting and management of logs.

2013: VMware vCenter Log Insight 1.5

On October 15, 2013 VMware announced release of the new version of VMware vCenter Log Insight 1.5.

VMware vCenter Log Insight provides monitoring of data from applications, virtual infrastructure and the physical equipment in real time, helping to increase efficiency of operation and to minimize expenses and a downtime. Integration between VMware vCenter Log Insight and VMware vCenter Operations helps the organizations to integrate and analyze as structured, and unstructured data for integrated management of transactions.

New opportunities of VMware vCenter Log Insight facilitate adaptation in corporate environments and help to reduce a payback period of investments. VMware vCenter Log Insight 1.5 optimized for VMware vSphere simplifies use of the software packages developed by partners. It allows to increase visualization of magazines of logs program and the hardware of infrastructure, used in virtual and cloud environments.

2012: VMware purchased a system for the analysis of big data

One of world leaders of virtualization of VMware agreed on August 7, 2012 about purchase of the platform and Log Insight technology from Pattern Insight, it is said in the official statement of the system developer.

Transaction amount is not reported.

According to the CEO and the co-founder of Pattern Insight Spyros Ksantos, not only use of technology, the platform and brand, but also development team will pass to VMware.

In the statement Mr. Ksantos emphasized that acquisition will allow Log Insight to realize as much as possible system potential within VMware company.

Log Insight is technology of the analysis and management of large volume of the mashino-generated data in real time. The technology is used for operational analytics of data in traditional data processing centers and cloud environments.

Sale of Log Insight will allow Pattern Insight to concentrate entirely on the main product Code Assurance entering Code Insight line. Code Assurance is the solution about detection and the analysis of different errors at software development.

Notes