This is a known issue affecting vRealize Log Insight.
Currently there is no resolution.
This issue will be resolved in a future vRealize Log Insight release.
Workaround:
To workaround this issue, create Event Forwarders without spaces, or underscores instead of spaces.
To delete existing Event Forwarders, remove the configuration in the vRealize Log Insight config page.
- Navigate to https://LogInsightIPorFQDN/internal/config in a browser, and log in as the local admin user.
- Locate the event-forwarding section.
Example:
<event-forwarding>
<target name="Event Forwarder Name">
<host value="1.1.1.1" />
<port value="9000" />
<proto value="cfapi" />
<ssl enabled="false" />
<disk-cache-size value="104857600" />
<worker-count value="8" />
<forward-complementary-fields enabled="true" />
</target>
</event-forwarding>
- Delete the entire <target></target> block for the forwarder you'd like to remove. Note that each forwarder is represented by a single target block. In the case of removing a single configured Event Forwarder, the remaining forwarding configuration would be:
<event-forwarding>
</event-forwarding>
- Click Save.