NSX-T MP Node Liagent service has stopped
What is liagent in NSX-T and other VMware appliances?
Recently I found vRealize Network Insight sending alerts saying "NSX-T MP Node Liagent service has stopped". Digging over the internet did not take me anywhere so I started on my own. Liagent mysteriously sounds like Li-agent "Li = Log Insight". Taking this assumption I looked at the NSX-T content pack configuration options in vRealize Log Insight and voila I found the answer and here is what I found.
We can set up logging in NSX-T to send logs to vRealize Log Insight in 1 of the 2 ways. Here are the commands you can use, make sure you ssh using admin
a. Using rsyslog: set logging-server <rsyslog-server IP/FQDB> proto udp/tls level info (chose from UDP and TLS)
b. Using liagent: set logging-server <vRLi server IP/FQDN> proto li/li-tls level info (chose from Log Insight unencrypted "li" or encrypted "li-TLS')
In the commands used above the proto parameter li or udp makes all the difference, the liagent service runs if you either configure logging using liagent or manually start the liagent service where it has no purpose to serve.
You might as well ask, which one should I use now, well I got you covered, take a look at 12 reasons why you should prefer liagent over rsyslog
Comments
Post a Comment