vrli_settings

VCF Operations for Logs (vRLI) — appliance settings (SSH-driven).

Two 912-Controls requirements on vRLI 9.0.2.0 have no REST surface on this build; both are set on the appliance itself:

  • Session inactivity timeout — lives in Jetty’s web.xml at /usr/lib/loginsight/application/etc/3rd_config/web.xml as <session-timeout>N</session-timeout> (value in minutes). The vRLI API’s session ttl field mirrors this same value in seconds. We probed /api/v2/settings/*, /api/v2/timeouts, /api/v2/session-timeout and /api/v2/security/session-timeout — all 404 on 9.0.2.0.25575214.

  • IPv4 DNS servers — the read-side is REST (GET /api/v2/cluster/nodes returns dnsServers as a space-separated string), but there is no write endpoint. DNS is applied by systemd-networkd from /etc/systemd/network/10-eth0.network (static config on the appliance) and reflected into /run/systemd/resolve/resolv.conf via systemd-resolved. We edit 10-eth0.network and restart systemd-networkd + systemd-resolved.

Both operations require root SSH (see the ssh sub-block in saltext.vcf.vrli pillar); the API user has no filesystem access.

saltext.vcf.clients.vrli_settings.get_cluster_nodes(opts, profile=None)[source]

Return /api/v2/cluster/nodes verbatim.

Each node dict includes dnsServers (space-separated IPv4 + IPv6), gateway, netmask, ip — all read-only.

saltext.vcf.clients.vrli_settings.get_dns_servers(opts, profile=None)[source]

Return the IPv4 DNS servers reported by the API for the primary node.

saltext.vcf.clients.vrli_settings.get_session_timeout(opts, profile=None)[source]

Return the current session inactivity timeout in seconds.

Reads <session-timeout> from web.xml (which stores minutes) over SSH and multiplies by 60. Requires root SSH access.

saltext.vcf.clients.vrli_settings.set_session_timeout(opts, seconds, profile=None)[source]

Rewrite <session-timeout> in web.xml and restart the Jetty daemon.

seconds is rounded down to whole minutes (Jetty stores minutes). A restart of the loginsight service is triggered because the web descriptor is only read at daemon startup.

saltext.vcf.clients.vrli_settings.get_dns_servers_from_appliance(opts, profile=None)[source]

SSH-read of the configured IPv4 nameservers.

Prefer get_dns_servers() (REST) for read-only queries; this variant is exposed for parity with set_dns_servers() and for verification after a write.

saltext.vcf.clients.vrli_settings.set_dns_servers(opts, servers, profile=None)[source]

Set the IPv4 DNS servers by rewriting 10-eth0.network.

Existing IPv6 DNS= lines (if any) are preserved; only IPv4 entries are replaced. Applies the change with networkctl reload and systemctl restart systemd-resolved.