VMware vRealize Log Insight is an interesting solution to provide real-time and archive log management, especially for VMware environments.

Machine learning-based Intelligent Grouping and high-performance search enable faster troubleshooting across physical, virtual, and cloud environments. vRealize Log Insight can analyze terabytes of logs, discover structure in unstructured data, and deliver enterprise-wide visibility using a modern Web interface.

Most important, with VMware vCenter Standard you already have a license for vRealize Log Insight, limited to 25 sources, but enough for small environments.

Now there is a new version available: vRealize Log Insight 4.6

What’s new

This release includes new features for the vRealize Log Insight server and agent.

vRealize Log Insight Server Features

  • Support for up to 15 vCenters per node.
  • Added ability to send an alert when a configured log source stops sending log events after a fixed amount of time.
  • Added ability to export a full list of agents from the Admin->Agents page.
  • Added ability to control the visibility of items on Dashboard widgets. Use Shift-Click  to toggle and Option/Alt-Click to show all.
  • Added ability to search for users on the admin/users page and to delete multiple users.
  • Ability to authenticate VMware Identity Manager (vIDM) local users.
  • For SLES installations, product upgrade now updates base operating system libraries from SLES 11 SP3 to SLES 11 SP4.  This means that installations that are upgraded to this release, and installations from fresh deployments of this release have the same base OS libraries.
  • Additional APIs including those for creating alerts, deleting VIPs, and authenticating with vIDM.
  • Improved informational messaging when deleting VIPs with the API.
  • Minor Improvements for PLU license representation on the license page.
  • Support for receiving RAW event messages without headers.

vRealize Log Insight Agent Features

  • Support for sending syslog over UDP.
  • Importer support for bzip and bzip2 archiving formats.
  • Support for configurable compression for HTTP requests when an agent sends log events with the Ingestion API.
  • Agent status now includes information about the server or servers it sends logs to.
  • Agents can now read logs from journald system service for log data in Linux distributions running systemd. 
  • Ability to configure multiple destinations for an agent from the main configuration server.


vRealize Log Insight 4.6 supports the following VMware products and versions:

  • vRealize Log Insight can pull events, tasks, and alarms data from VMware vCenter Server 5.5 or later.
  • You can integrate vRealize Log Insight 4.6 with vRealize Operations Manager version 6.0 or later.

Browser support

vRealize Log Insight 4.6 supports the following browser versions. More recent browser versions also work with vRealize Log Insight, but have not been validated.

  • Mozilla Firefox 45.0 and above
  • Google Chrome 51.0 and above
  • Safari 9.1 and above
  • Internet Explorer 11.0 and above
    Note: Internet Explorer Document mode must be used in Standards Mode. Other modes are not supported. The Compatibility View browser mode is not supported.

What’s changed

  • Active Directory authentication is no longer deprecated — still recommended to use VMware Identity Manager instead
  • Support for up to 15 vSphere integrations per node in the Log Insight cluster (that’s up to 180 vSphere integrations!) — previously Log Insight allowed a maximum of 10 vSphere integrations per cluster
  • Dashboard time synchronization defaults to off now

How to upgrade

  • You must be running Log Insight 4.5 — upgrades must be sequential from every GA release.
  • You must access the cluster master’s FQDN (not ILB VIP) and ensure you have access to ports 443 and 80.
  • You go to the /admin/cluster page and follow the upgrade workflow.

Note: Log Insight 4.0 and newer are the only supported versions at this time. Given the new release of Log Insight 4.6, end of support moves from 2018/11/15 to 2019/04/12.


This post has already been read 933 times.

Andrea MauroAbout Andrea Mauro (2695 Posts)

Virtualization, Cloud and Storage Architect. Tech Field delegate. VMUG IT Co-Founder and board member. VMware VMTN Moderator and vExpert 2010-18. Dell TechCenter Rockstar 2014-15. Microsoft MVP 2014-16. Veeam Vanguard 2015-18. Nutanix NTC 2014-18. PernixPro 2014-16. Several certifications including: VCDX-DCV, VCP-DCV/DT/Cloud, VCAP-DCA/DCD/CIA/CID/DTA/DTD, MCSA, MCSE, MCITP, CCA, NPP.

Related Post: