Improve Query performance by removing corrupted buckets in vRealize Log Insight

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:
Query performance of vRealize Log Insight may degrade while under average or low load.

Environment

VMware vRealize Log Insight 3.0.x
VMware vRealize Log Insight 4.7.x
VMware vRealize Log Insight 3.3 for vCenter Server 5.x STD
VMware vRealize Log Insight 4.5.x
VMware vRealize Log Insight 8.x
VMware vRealize Log Insight 4.6.x
VMware vRealize Log Insight 3.3 for vCenter Server 6.0 STD
VMware vRealize Log Insight 2.5
VMware vRealize Log Insight 3.3.x
VMware vRealize Log Insight 4.8.x
VMware vRealize Log Insight 3.x
VMware vRealize Log Insight 4.0.x
VMware vRealize Log Insight 4.3.x
VMware vRealize Log Insight 2.5.x
VMware vRealize Log Insight 4.x
VMware vRealize Log Insight 3.6.x

Cause

Corrupted data buckets in the inventory of vRealize Log Insight can cause slow querying.

Resolution

To Improve performance, remove the corrupted buckets from the vRealize Log Insight inventory.

To identifying and remove corrupted buckets from the inventory, use one of these options:

Option 1

1. Analyze /storage/var/loginsight/runtime.log and compile a list of bucket UUIDs to remove.
2. Stop the Log Insight service by running the following command:

service loginsight stop

3. Run the following command to remove a bucket:

/usr/lib/loginsight/application/sbin/bucket-index UUID delete

Note: Replace UUID with the UUID of a bucket found in step 1.

4. Repeat step 3 for all UUIDs in your list.
5. Start the Log Insight service by running the following command:

service loginsight start

Option 2

1. Change to the /usr/lib/loginsight/application/sbin/ Directory:

cd /usr/lib/loginsight/application/sbin/

2. Run the bucket validator to determine the UUIDs of the corrupted buckets

./validate-bucket -Vv

3. Stop the Log Insight service by running the following command: 

service loginsight stop​​

4. Run the following command to remove a bucket:

./bucket-index UUID delete

Note: Replace UUID with the UUID of a bucket found in step 1.

5. Repeat step 4 for all UUIDs in your list.
6. Start the Log Insight service by running the following command:

service loginsight start