Issue with Infoblox Data source in Aria Operations for Networks

Products

• VMware Aria Operations for Networks
• VMware vRealize Network Insight 6.x

Issue/Introduction

• The Infoblox is added in the AON as a data source to fetch DNS mapping.
• The end points(Physical IPs) are not resolving to their corresponding DNS names, and the flows are not associated with the DNS names for these end points (physical IPs).

Environment

Aria Operations For Network 6.x

vRealize Network Insight 6.x

 

Cause

• The service account used for integrating with Infoblox lacks the necessary permissions to execute the wapi/v2.9.7/view calls.
• As a result, the view API did not return any data from Infoblox.
• The below API calls can be run on the collector to validate the permissions of the user/services account. 

curl -k1 -u user -X GET 'https://X.X.X.X/wapi/v1.0/?_schema'

curl -k1 -u user -X GET 'https://X.X.X.X/wapi/v2.9.7/view'

 

Example for non working scenario where there are no results: 

support@aria-networks-collector:~$ curl -k1 -u admin -X GET 'https://x.x.x.x/wapi/v2.9.7/view'
Enter host password for user 'admin':
support@aria-networks-collector:~$

Example for working scenario: 

"x.x.x.x" is an IP address of the Infoblox.

"User" is the service account used of the integration.

Resolution

• The DNS data from Infoblox is used only for enriching the flows where either the source or the destination IP addresses are associated with the physical devices.
• Grant the necessary API Privileges to the service account used for integrating with Infoblox.
• Refer to the Infoblox vendor document.