Log Insight 2.0 featured a scale-out option which relied on an external load balancer in order to support ingestion high availability. In Log Insight 2.5 an integrated load balancer is available. I would like to discuss the features of the integrated load balancer and also offer a comparison between using an external load balancer versus the integrated load balancer.
There have been two major security vulnerabilities exposed this year that impacted most VMware products: ShellShock and POODLE. Log Insight addressed ShellShock by releasing a patch for Log Insight 1.5 GA, 2.0 GA and 2.5 TP3 and newer. In Log Insight 2.5 GA the POODLE attack has also been mitigated. In short, SSLv3 has been disabled. To my knowledge, this is the first VMware product with a server-side fix against POODLE that does not require manual user intervention. Note previous versions of Log Insight have not been patched. If you wish to disable SSLv3 on previous versions of Log Insight, read on.
A feature that might be a little harder to locate, but one that provides powerful insight is the new log browsing and infinite scroll feature known in the UI as “View Event in Context”. I would like to dive into the feature to expose it’s value.
Less than a month after the beta and Log Insight 2.5 is now GA! This post contains everything you need to know about the new version including important upgrade information (there are changes from the beta!). Read on to learn more.
In addition to the major UI enhancements introduced in Log Insight 2.5, there are several smaller UI enhancements that I believe are important to call out. I would like to cover these enhancements in this post.
Log Insight provides multiple different ways to save queries (e.g. extracted fields, favorites, alerts, and dashboard widgets). To date, only extracted fields could be edited after they were saved. In Log Insight 2.5, the ability to edit all types of saved queries has been introduced. I would like to walk through how queries can be edited and what this new feature means to Log Insight users.
Extracted fields provide a powerful way to construct queries in Log Insight. In Log Insight 2.5, two improvements have been made to extracted fields to make them easier to understand and more efficient to construct. I would like to discuss these changes.
Several enhancements have been made to the UI in Log Insight 2.5. I would like to cover these enhancements starting with the change on the Dashboards page.
Log Insight ships with two content packs: General and vSphere. Both of these content packs have been updated for Log Insight 2.5. I would like to cover the updates in these two content packs and how you can best leverage them in your environment.
One of the greatest features of Log Insight is its notion of content packs. Content packs are free plugins into Log Insight with pre-defined knowledge about specific events (for more information check out this post). Content packs are available from a variety of different locations and Log Insight 2.5 includes a new way that makes installing and updating content packs even easier!