18

Log insight demo card prompter

Embed Size (px)

DESCRIPTION

Demo Notes for the LogInsight Demo given at the Reston Virtualization Meetup 2/11/2014 http://www.meetup.com/Reston-Virtualization-Users-Group/events/158219142/

Citation preview

Page 1: Log insight demo card prompter
Page 2: Log insight demo card prompter

Open Firefox, Log in as admin/VMware1!

Page 3: Log insight demo card prompter

Click on Interactive Dashboard

Page 4: Log insight demo card prompter

Set the Dates

• April 11th, 2013 – April 25th, 2013, click SEARCH

Page 5: Log insight demo card prompter

Search on “scsi performance”

Page 6: Log insight demo card prompter

Expand Hostname and hover over large bar

Page 7: Log insight demo card prompter

Change ‘Count’ to ‘Average’

Page 8: Log insight demo card prompter

Add “latencyInMicros (vsphere)” and check hostname

Click Update

Page 9: Log insight demo card prompter

MouseOver Peaks and note strata-esx2’s peak value

Page 10: Log insight demo card prompter

Save the Query

Page 11: Log insight demo card prompter

Create New Dashboard “My New Dashboard”

Page 12: Log insight demo card prompter

Click “Dashboards”, and show the Dashboard is added

Page 13: Log insight demo card prompter

Custom Fields – Go back to Interactive AnalyticsExpand user, and highlight the user ksigel as logging in

Page 14: Log insight demo card prompter

Highlight “via X” and click on Extract Field

Page 15: Log insight demo card prompter

Create a New Field, and Test the Field

Page 16: Log insight demo card prompter

Create a New Field, and Test the Field• Highlight“authenticatedsuccessfully” and Extract

Add expression To previous contextsave

Page 17: Log insight demo card prompter

Expand Authenticate Status, show Failure!• Ooh – a failure!

We did not expect that!

Page 18: Log insight demo card prompter

Show Failure Event

• Show failed login• Discuss how this

could be added to find brute force attacks and other things

• Discuss how a new dashboard could be created