vmware-aria-logs
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| LI_BASE_URL | Yes | Log Insight appliance URL | |
| LI_PASSWORD | Yes | API password | |
| LI_PROVIDER | No | Auth provider (Local, ActiveDirectory) | Local |
| LI_USERNAME | No | API username | admin |
| LI_VERIFY_TLS | No | Verify TLS certificates | false |
| LI_TIMEOUT_SEC | No | HTTP request timeout (seconds) | 30 |
| VROPS_BASE_URL | No | Aria Operations URL | |
| VROPS_PASSWORD | No | vROps password | |
| VROPS_USERNAME | No | vROps username | admin |
| VROPS_VERIFY_TLS | No | Verify TLS certificates | false |
| VROPS_AUTH_SOURCE | No | Auth source | local |
| VROPS_TIMEOUT_SEC | No | HTTP request timeout (seconds) | 30 |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| query_eventsA | Search log events in VMware Aria Operations for Logs. Args: lookback_minutes: How far back to search (default 60 minutes). search_term: Free-text search term (optional). limit: Maximum number of events to return (default 100, max 10000). field_name: Optional field constraint name (e.g. 'hostname', 'appname'). field_operator: Constraint operator (CONTAINS, NOT_CONTAINS, HAS, etc.). field_value: Constraint value. Returns: JSON array of log events with text, source, timestamp, and fields. |
| get_versionA | Get VMware Aria Operations for Logs appliance version and API surface. Returns version info and probes key API endpoints to determine which features are available on this deployment. |
| list_dashboardsA | List saved dashboards from Aria Operations for Logs. Uses the legacy vRLIC API ( |
| detect_incidentsA | Detect mass log incidents using signature clustering (Stormbreaker engine). Queries events, groups them by normalized signature pattern, and returns clusters that exceed the mass threshold — ranked by event count. Args: lookback_minutes: How far back to search (default 60 minutes). search_term: Free-text search term (optional, empty = all events). event_limit: Max events to fetch for analysis (default 5000). mass_threshold: Min events per signature to qualify as incident (default 5). max_incidents: Max incidents to return (default 20). Returns: JSON with ranked incidents including signature, event count, blast radius (affected sources), and sample text. |
| find_vrops_resourcesA | Find resources in VMware Aria Operations (vROps) by name. Useful for correlating Log Insight events with vROps monitored entities. Requires VROPS_BASE_URL to be configured. Args: name: Resource name to search for (VM name, host name, etc.). Returns: JSON array of matching vROps resources with IDs, names, and types. |
| get_vrops_alertsB | Get alerts from VMware Aria Operations for specific resources. Args: resource_ids: Comma-separated vROps resource IDs. Returns: JSON array of alerts with severity, status, and descriptions. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/apollion69/vmware-aria-logs'
If you have feedback or need assistance with the MCP directory API, please join our Discord server