VCSA events show UserloginSessionEvent and UserLogoutSessionEvent for user [email protected]

Products

• VMware vCenter Server
• VMware vSphere ESX 7.x
• VMware vSphere ESX 8.x
• VMware NSX-T Data Center

Issue/Introduction

• VCSA event logs show UserloginSessionEvent and UserLogoutSessionEvent for user [email protected]
• In esxi log file /var/log/hostd.log, you can see limes similar to:

<timestamp> In(166) Hostd[2099489]: [Originator@6876 sub=Vimsvc.ha-eventmgr opID=vim-cmd-cc-4eef sid=SID user=root] Event 158022 : User [email protected] logged out (login time: <Date Time>, number of API invocations: 2, user agent: VMware-client/6.5.0)

• This may cause  vCenter storage/seat disk exhaustion alert.
• nsx-exporter vib prior to 4.2 is installed on ESXi

Example:

esxcli software vib list | grep nsx-exporter

nsx-exporter                   4.1.2.1.0-8.0.22667792                VMware  VMwareCertified   2024-06-25    host

Environment

• VMware vCenter Server 7.0.x
• VMware vCenter Server 8.0.x
• ESXi 7.x
• ESXi 8.x
• NSX-T 4.1

 

Cause

• nsx-exporter was using "vim-cmd hostsvc/net/pnic_info" command to get the pnic info, which was establishing hostd session in every command execution which caused excessive logging for each session of login
• This issue is resolved in NSX-T 4.2

 

 

Resolution

• Update NSX-T to version 4.2 or above

 

Additional Information

https://docs.vmware.com/en/VMware-NSX/4.2.0/rn/vmware-nsx-420-release-notes/index.html

Fixed Issue 3292111: Quick roll over of logs due to frequent login and logout events.

There is no impact on functionality.