Skip to main content
Version: 2.12.0

Deployment & Configuration

Integrating NFO involves setting up Aria Operations for Logs as a syslog destination and configuring NFO to stream its enriched JSON events.

1. Configure Aria Operations for Logs Ingestion​

Aria Operations for Logs ingests NFO data through its built-in syslog service.

  1. Log in to the VMware Aria Operations for Logs web interface.
  2. Navigate to Administration > Management > Cluster.
  3. Locate the Integrated Load Balancer (ILB) IP address. This is the destination you will use in NFO.
  4. Ensure your firewall allows traffic on the designated syslog port (typically UDP 514).

2. Configure NFO Output​

Set NFO to stream the processed data to the ILB address.

  1. In the NFO GUI, navigate to Data Outputs and click (+).
  2. Type: Select Syslog (UDP) or JSON (UDP).
  3. Address: Enter the ILB IP address of your Aria Operations for Logs cluster.
  4. Port: 514 (or your custom ingestion port).

3. Verification​

Verify that the data is arriving and being parsed correctly in the Aria environment.

  1. In Aria Operations for Logs, go to the Explore Logs page.
  2. Use the search bar to filter for NFO events (e.g., text contains "nfc_id=20062").