Content Packs

vra7 setup instructions - Apache CLF

Setup instructions for VRA7 content pack specifies the following: In addition to installing and configuring the vRA content pack, the following content packs should also be installed and configured:

• Apache - CLF
• vRealize Orchestrator

I am trying to figure out how the content pack "Apache - CLF" should be used for VRA7?
For filters to select which agents receive the Agent Configuration below, which VRA server... more »

Content Packs

Snapshot Dashboard in vSphere Content Pack seems broken

The widget "VM Snapshots Created" in the "Virtual Machine - Snapshots" Dashboard in LI 4.0 seems to be broken. Even if taking multiple snapshots and setting the dashboard time span correctly, it stays on 0 and the other widgets on the dashboard remain empty.

It seems to stem from the field 'vmw_esxi_snapshot_operation', which doesn't seem to match any of the log events that ESXi or vCenter Server generates when taking... more »

Content Packs

Horizon VM to Zero Client

Trying to get log insight to grab the C:\ProgramData\VMware\VDM\logs\pcoip_server_2017_04_24_0000111c.txt file so that we can draw a line from a VDI session to a human on the other end of a zero client (we are a school district - kids are abusive on the equipment)

There is a handy line in this file that tells me the IP of the zero client (man DNS resolution would be nice) but I can work with this because I have my DHCP... more »

Content Packs

Veeam B&R Content Pack Agent configuration incomplete

Veeam has issued a content pack for their popular product Veeam Backup & Replication with several dashboards and field extractions.

Still, Agent has no configuration and does not collect Veeam events.


Simple as it is, it could be useful to have Agent configuration ready here:



channel=Veeam Backup


Yes, that's it :)


Should I really attach it as a separate content pack here?

Content Packs

HP OA content pack



Had en issue - created an content pack 🙂


So here it is the HP OA content pack. All there is required is to set HP OA til send syslog to log insight.


It has three dashboards - Overview, changes and authentication.


Overview gives you quick insight to changes and problems in your environment.

Changes - is all about changes made by humans

Authentication - shows login attempts and failures

Content Packs

Super Pack for non-log data from Active Directory

Upon request from our security people, I have made a PowerShell module that collects non-log data from AD and pushes it as logs to the loginsight server. This way they can have a Dashboard of data that is either not accessible from logs, or where log retreival would mean a massive search from all data available, and thus very slow searches. I have built this in this way:

1. Powershell scripts running as scheduled jobs... more »

Content Packs

MS Exchange Content Pack agent scripts configuration clarification needed

We have MS Exchange environment with 8 Exchange servers. We have Log Insight 4.3 with MS Exchange CP 3.2.

While configuring it according to attached documentation we have encountered following problems that I ask for clarification:

1. Agents powershell scripts run on one or more MS Exchange servers
1.1 Observation: Running both scripts exchange_wrapper.ps1 and exchange_mailbox_wrapper.ps1 seems to give the same output... more »