Enabling SSL for Thrift in vRealize Log Insight 8.3

Products

• VMware Aria Suite

Issue/Introduction

This article provides steps for enabling SSL for thrift.

Environment

VMware vRealize Log Insight 8.x
VMware vRealize Log Insight 8.3.x

Resolution

To enable secure inter-node communication (SSL for Thrift), set the value of secure-rpc to true in the vRealize Log Insight configuration.

1. Navigate to https://loginsight_address/internal/config in your Web browser, and check the Show all settings checkbox.

Note: Replace loginsight_address with the IP or FQDN of your vRealize Log Insight Primary node.

2. Under the security section, set the value of secure-rpc to true.

Example: <secure-rpc value="true" />

3. Click Save.
4. Reboot all nodes in the vRealize Log Insight cluster.

Note: You can preform a guest shutdown on all nodes in the vCenter UI or issue the reboot command to each node via console or SSH.

Additional Information

There is no need to explicitly enable secure inter-node communication if FIPS mode is ON.

Impact/Risks:
Potential performance degradation.