Integration of VMware Aria Operations for Logs with vSphere fails
search cancel

Integration of VMware Aria Operations for Logs with vSphere fails

book

Article ID: 377499

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

  • When performing the Integration of VMware Aria Operations for Logs with vSphere, you see failures similar to:
    In the vCenter Server vSphere Client UI, click on one of the ESXi hosts that was to be configured, expand the Monitor > Tasks view:

Task Name: Update option values
Status: A general system error occurred
Initiator: [email protected]

  • Checking /var/log/hostd.log file on the impacted ESXi host , following entries are observed

    yyyy-mm-dd hh:mm:ssZ Er(163) Hostd[2334996]: [Originator@6876 sub=Hostsvc.SyslogConfigProvider opID=xxxxxx-xx-xxxx sid=xxxxxxx user=vpxuser:DOMAIN\svc_VMLogOps] Failed to set global syslog configuration : Failed to resolve remote host syslogServer.domain.com
    yyyy-mm-dd hh:mm:ssZ Db(167) Hostd[2106387]: [Originator@6876 sub=Solo.Vmomi syslogServer.domain.com user=vpxuser:DOMAIN\svc_VMLogOps] Arg changedValue:
    yyyy-mm-dd hh:mm:ssZ Db(167) Hostd[2106341]: --> (vim.option.OptionValue) [
    yyyy-mm-dd hh:mm:ssZ Db(167) Hostd[2106341]: -->    (vim.option.OptionValue) {
    yyyy-mm-dd hh:mm:ssZ Db(167) Hostd[2106341]: -->       key = "Syslog.global.logHost",
    yyyy-mm-dd hh:mm:ssZ Db(167) Hostd[2106341]: -->       value = "udp://syslogServer.domain.com:514"
    yyyy-mm-dd hh:mm:ssZ Db(167) Hostd[2106341]: -->    }
    yyyy-mm-dd hh:mm:ssZ Db(167) Hostd[2106341]: --> ]
    yyyy-mm-dd hh:mm:ssZ In(166) Hostd[2106387]: [Originator@6876 sub=Solo.Vmomi opID=xxxxxx-xx-xxxx sid=xxxxxxx user=vpxuser:DOMAIN\svc_VMLogOps] Throw vmodl.fault.SystemError
    yyyy-mm-dd hh:mm:ssZ In(166) Hostd[2106387]: [Originator@6876 sub=Solo.Vmomi opID=xxxxxx-xx-xxxx sid=xxxxxxx user=vpxuser:DOMAIN\svc_VMLogOps] Result:
    yyyy-mm-dd hh:mm:ssZ In(166) Hostd[2106341]: --> (vmodl.fault.SystemError) {
    yyyy-mm-dd hh:mm:ssZ In(166) Hostd[2106341]: -->    reason = "Internal error",
    yyyy-mm-dd hh:mm:ssZ In(166) Hostd[2106341]: -->    msg = "",
    yyyy-mm-dd hh:mm:ssZ In(166) Hostd[2106341]: --> }

  • Attempting to manually configure the same remote syslog location fails on the ESXi hosts.

Environment

vSphere ESXi 7.0.x
vSphere ESXi 8.0.x
vSphere vCenter Server 7.0.x
vSphere vCenter Server 8.0.x
vSphere Cloud Foundation 4.x
vSphere Cloud Foundation 5.x
Aria Operations for logs 8.x

Cause

DNS records are not present for the remote syslog server(Aria Operations for logs) that is trying to be configured and/or the ESXi hosts.

Resolution

Ensure that forward and reverse lookup for the ESXi host, vCenter Server as well as the remote syslog server(Aria Operations for logs) is configured.

Additional Information