Search the VMware Knowledge Base (KB)
View by Article ID

Log Insight load balancer incompatible with NSX Distributed Firewall Protection (2146335)

  • 0 Ratings

Symptoms

  • In the vRealize Log Insight user interface under Administration > Management > System Monitor > Statistics, you see these symptoms:

    • The Syslog Events Incoming Rate (Per Second) metric is higher on the Integerated Load Balancer (ILB) node relative to all other nodes.
    • The API Events Incoming Rate (Per Second) metric is higher on the ILB node relative to all other nodes.

  • Higher CPU usage on the ILB node as compared to other nodes in a vRealize Log Insight cluster.
  • You are using vRealize Log Insight 3.6 and VMware NSX.
  • A Log Insight Cluster is behind NSX distributed Firewall Protection.

Purpose

Exclude Virtual machines that are part of vRealize Log Insight cluster from VMware NSX Distributed Firewall Protection.

Cause

This issue occurs because vRealize Log Insight's cluster virtual IP uses a Linux Virtual Server in Direct Server Return Mode (LVS-DR) for load balancing which is not supported by NSX.

Resolution

This is an expected behaviour in vRealize Log Insight with NSX.

To work around this issue, exclude the virtual machines that are part of the vRealize Log Insight cluster from VMware NSX Distributed Firewall Protection. 

To exclude virtual machines from NSX Distributed Firewall Protection:

  1. Log in to the vSphere Web Client.
  2. Click Networking & security and then click Firewall.
  3. Click NSX Managers.
  4. In the Name column, click an NSX Manager.
  5. Click the Manage tab and then click Exclusion List tab.
  6. Click the Add(plus) icon.
  7. Type the name of the virtual machineyou want to exclude.
  8. Click Add.
  9. Click OK.

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 0 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 0 Ratings
Actions
KB: