This is expected behavior if your ESXi hosts are on version 7.x or lower.
ESXi 7.x and below do not meet the RFC5424 standard expected from Aria Operations for Logs SaaS to successfully parse the message.
You will need to upgrade your ESXi hosts to 8.0 or above so that host logs are sent in the RFC5424 standard.