vRealize Log Insight to Operations Custom Alerts

A small collection of useful search terms in vRealize Log Insight for creating custom alerts to vRealize Operations.

These are cases I’ve found that are not covered by vROps natively, nor does the vSphere Content Pack for Log Insight pick them up by default.

Last updated: February 12th 2018.

Failed ESXi host bootbank:

Raise an vROps alert if an ESXi host has a failed bootbank.

vc_event_type = exists
text contains = “Bootbank cannot be found at path ‘/bootbank’”

ESXi host license has expired:

Raise an vROps alert if an ESXi host has an expired license.

vc_event_type = exists
text contains = “Expired host license on”

ESXi host license expiry warning:

Raise a vROps alert if an ESXi host has a license that is about to expire.

vc_event_type = exists
text contains = “Your host license”