Multiple Inactive ESXi Host Email Alerts Triggered by Aria Operations for Logs Cluster

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Multiple Inactive Host Email Alerts from VMware Aria Operations for Logs Cluster stating:

Inactive Host Alert triggered at <timestamp>
VMware Aria Operations for Logs has found <x> hosts which are inactive over the past <y> days.

 

Environment

VMware Aria Operations for Logs 8.x

Cause

Email notifications are triggered due to the presence of inactive hosts (may be duplicate entries) which still shows on the user interface. 

Resolution

By default, these inactive hosts are automatically purged after 93 days. However, to immediately remove the inactive hosts, proceed with following the steps below to truncate the ingestion_hosts_v3 table:

- Take SNAPSHOT of all the nodes in the cluster.
- Log into the Primary node of Aria Operations for Logs as root via SSH or web console.
- Run the following command to log into the Cassandra database:

cqlsh-no-pass 

Note: If you experience an error while trying to access Cassandra database then execute the following command to  bypass the certificate error from cqlsh-no-pass:

sed -i 's/validate = true/validate = false/' /storage/core/loginsight/cidata/cassandra/config/cqlshrc

- Run the following command to truncate the ingestion_hosts_v3 table:

truncate logdb.ingestion_hosts_v3;

- Run the following command to exit the Cassandra database:

exit

- After truncation, hosts may temporarily disappear from the Management > Hosts tab in the Aria Operations for Logs UI. Allow up to 5 minutes for the system to automatically rediscover and repopulate the host list.

Additional Information

To validate the status of truncation execute the following command: lisuper@cqlsh> SELECT * FROM logdb.ingestion_hosts_v3;