Network Rule Count Exceeded error in Aria Operations for Networks

Products

• VCF Operations for Networks
• VMware vRealize Network Insight 6.x
• VMware Aria Operations (formerly vRealize Operations) 8.x

Issue/Introduction

Symptoms:

• Path search and intent verification may not be available in network map.
• The following error is found in the Network Maps and Intents page of the Aria Operations for Network UI:

Network rule count exceeded.

• There will be "Snapshot Errors" shown in the snapshot report.  To find these errors:

1. SSH to the primary Platform node as the support user
2. Switch to the ubuntu user context - Command: ub
3. Run Remote Debugger tool - Command: rdb
4. Run the Snapshot Report - Command: print_snapshot_report -l1 -d -err

Note: You will see output similar to the following message:
Snapshot MK: xxxxx:xxxx:xxxxxxxxxxxxxxxxxxxxxxx, Timestamp: 08 Dec xxxx 14:38:40.325 UTC (xxxxxxxxxxxxxxxxx), Time Taken: 0 seconds
Snapshot Errors: The total rule count in the network (152114) is more than the maximum capacity of 19000. Not triggering the pipeline

Environment

VMware vRealize Network Insight 5.3.x
Aria Operations for Network 6.X

Cause

Incorrect deployment configuration specified. 

Note: The deployment configuration is specified by the deployment type on initial configuration and is not a user-configurable setting.

Resolution

If you believe you have encountered this issue, please open a support case with Broadcom Support and refer to this KB article.

 

Additional Information

Impact/Risks:
Changing the deployment configuration may negatively impact non-Network Map features in vRealize Network Insight. These features include:

• Total number of VMs
• Flows per day
• Total Flows
• Flow Planning

Consult the VMware Aria Operations for Networks 6.14 Release Notes page for the relevant version of vRealize Network Insight, and ensure that your customer fully understands the impact of this change to those features.