Excessive warning logs from apigw.log being sent to the Syslog server
search cancel

Excessive warning logs from apigw.log being sent to the Syslog server

book

Article ID: 378091

calendar_today

Updated On: 04-15-2025

Products

VMware vCenter Server 8.0

Issue/Introduction

  • Excessive apigw.log log events are being sent to the syslog server continuously. 

  • In vCenter /var/log/vmware/vsphere-ui/logs/apigw.log file, similar log entries are available.

    [YYYY-MM-DDTHH:MM] [WARN ] data-service-pool-784 70028635 101174 200061 ApiGwServicePrincipal [] The token with id '_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' for domain vsphere.local(yyyyyyyy_yyyy_yyyy_yyyy_yyyyyyyyyyyy) is unusable (EXPIRED). Will acquire a fresh one.
    [YYYY-MM-DDTHH:MM] [WARN ] data-service-pool-784 70028635 101174 200061 ApiGwServicePrincipal [] The token with id '_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' for domain vsphere.local(yyyyyyyy_yyyy_yyyy_yyyy_yyyyyyyyyyyy) is unusable (EXPIRED). Will acquire a fresh one.

    [YYYY-MM-DDTHH:MM] [WARN ] agw-token-acq1254            ######## ###### 201649 ApiGwServicePrincipal [] The token with id '_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' for domain vsphere.local(yyyyyyyy_yyyy_yyyy_yyyy_yyyyyyyyyyyy) is unusable (EXPIRED). Will acquire a fresh one.
    [YYYY-MM-DDTHH:MM] [WARN ] -nio-127.0.0.1-5090-exec-387 70308125 118904 ###### ApiGwServicePrincipal [] The token with id '_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' for domain vsphere.local(yyyyyyyy_yyyy_yyyy_yyyy_yyyyyyyyyyyy) is unusable (EXPIRED). Will acquire a fresh one.

  • Restarting the "vsphere-ui" stops this logging temporarily, but after couple of days the same issue reoccurs.

Cause

Possible issue with STS causing an endless loop in vsphere-ui service, which is causing the apigw.log filled up with expired token events.

Resolution

This issue has been fixed in VMware vCenter 8.0 U3e.

Release notes: VMware vCenter Server 8.0 Update 3e Release Notes