VMware has acquired a log management and analytics tool that IT pros say could fill a gap in its vCenter Operations offering.
Pattern Insight Inc.’s Log Insight software is used “to analyze large amounts of machine-generated data in real time” and “to discover emerging patterns and guide administrators to the root cause of problems,” according to a press release that announced the sale Tuesday.
Employees from Mountain View, Calif.-based Pattern Insight who work on Log Insight will also move to VMware, according to a statement from Pattern Insight’s CEO.
VMware confirmed Wednesday afternoon that the transaction had occurred, but did not disclose any plans for the software.
Log Insight may bolster vCops
IT pros familiar with vCenter Operations (vCOps) say there’s an obvious place for a log analyzer within that tool.
VMware vCenter Operations monitors the vCenter database, but “it would be interesting if [VMware] were to extend that ability to actually go out and capture and review the ESXi host log files, and not rely on vCenter’s database for all this data,” said Mark Vaughn, an IT consultant and vExpert.
“VCOps may tell you you’re having problems with an ESX server, … [and] you can collect all the logs in vCenter, you just can’t analyze any of them,” said Joachim Heppner a senior manager of virtualization engineering at a large pharmaceutical company based in the Northeast. “You [have to do it] manually or you have to use a third party product.”
It’s still to be determined where Log Insight will surface among VMware’s products, but close integration with the vCOps stack makes sense, said Chris Wolf, a research vice president with Stamford, Conn.-based Gartner Inc.
“To get a true end-to-end view, you need this type of analytics, and that's why tools from vendors like Pattern Insight and Splunk have been growing in popularity,” Wolf said.
The question remains whether VMware will use Log Insight just for VMware, or extend support to other products, said Heppner.
“Competing products like Splunk will take logs from anybody, and then you can…have one view of your network, your virtualization layer, your physical layer and application layer,” he said.