Host core dump files unrelated to NSX services trigger "Application Crashed" alarms in NSX UI upon upgrading to 4.0.0.1

Products

• VMware NSX

Issue/Introduction

Symptoms:

• You are running NSX-T 4.0.0.1
• Entries similar to the below are visible in NSX Manager syslog:

2022-11-18T06:58:59.592Z nsx-mg02 NSX 3597 MONITORING [nsx@6876 alarmId="fd17a723-a8cc-42a9-8a00-8d2ad75d62a5" alarmState="OPEN" comp="nsx-manager" entId="5d22f2b1-6eb9-4101-812c-b84191ea93e4" errorCode="MP701099" eventFeatureName="infrastructure_service" eventSev="CRITICAL" eventState="On" eventType="application_crashed" level="FATAL" nodeId="5d22f2b1-6eb9-4101-812c-b84191ea93e4" subcomp="monitoring"] Application on NSX node esxi01.example.com has crashed. The number of core files found is 3. Collect the Support Bundle including core dump files and contact VMware Support team.

 

• Core dumps are found present in /var/core on the ESXi host unrelated to NSX-T:

/var/core/xxxx-xxxx-drivers-plugin-util-zdump.001
/var/core/xxxx-xxxx-drivers-plugin-util-zdump.003
/var/core/xxxx-xxxx-drivers-plugin-util-zdump.000

 

Environment

VMware NSX-T Data Center 4.x
VMware NSX-T Data Center

Cause

The issue is caused due to the NSX Manager matching the core dumps without validating that they are utilized in NSX.

Resolution

This issue has been resolved in NSX-T 4.0.1.1

Workaround:
Remove the core dumps from /var/core on the ESXi hosts

Additional Information

Impact/Risks:
NSX is constantly reporting Application Crashed Alarms for many hosts