We have a big announcement for our October release of VMware Aria Operations for Logs! We are introducing Federated Queries as a new feature. The federated queries feature allows you to connect Aria Operations for Logs on-prem and Aria Operations for Logs SaaS instances together so you can query your on-prem logs and events from the Aria Logs SaaS log explorer. This feature does not require any ingestion, space, or cost on the SaaS side. After performing a few quick configuration steps, you will have access to all your on-prem logs under a single user interface!
Here is an example of the completed integration between Aria Logs on-prem as SaaS. I can see all my connected on-prem clusters and nodes, as well as their partitions and how much space the clusters are using for log storage.
Once the integration is complete, on our Aria Logs SaaS Logs Explorer page, we can query from both locations, SaaS and on-prem. This also allows you to correlate data and create dashboards and reports between all of your event locations without switching between multiple screens or configuring duplicate alerts and reports.
For more detailed configuration steps, please check out this video on federated queries from our Aria Cloud Management YouTube channel.
VMware Aria Logs Academy – Federated Queries
We recommend that you update your VMware Aria Operations for Logs on-prem instances to the newly released 8.14 version for best compatibility and then perform the integrations. After that, you should be ready to run some federated queries!
