Getting authentication failure alerts in Log Insight / vCenter due to Aria Operations for Networks collector VM using a service account that is no longer in use.

Products

• VMware Aria Operations for Networks

Issue/Introduction

vCenter is reporting authentication failures for a data source that has been deleted from Aria Operations for Networks.

You may see the errors in the Collector logs like "Connection close attempt on dead connection failed with message : Could not log out from VC"

Example log records:

2024-12-30T14:12:24.771Z ERROR vcenter.southbound.VCConnectionEntity VCENTER_###.###.###_Esxcli_OpMgr-0 isAlive:207 Could not check if VC is alive. java.rmi.RemoteException: Exception caught trying to invoke method CurrentTime_ nested exception is:

2024-12-30T14:12:24.772Z ERROR dataproviders.dsconnectionmanagement.ConnectionEntityPool VCENTER_###.###.###_Esxcli_OpMgr-0 getAliveConnection:146 Connection close attempt on dead connection failed with message : Could not log out from VC

 

Environment

Aria Operations for Networks 6.10.0
Aria Operations for Networks 6.11.0
Aria Operations for Networks 6.12.0
Aria Operations for Networks 6.12.1
Aria Operations for Networks 6.13.0
Aria Operations for Networks 6.14.0

Cause

Data Source connection authentication information has been cached on the Aria Operations for Networks collector due to which authentication failure alerts are seen.

Resolution

Reboot the Collector VM through vCenter to clear the cache.

In vCenter,

Reboot the  Aria Operations for Networks Collector VM through vCenter to clear the cache.
Steps as below:

1. In vCenter, search for Aria Operations for Networks Collector VM in question
2. Right click the Aria Operations for Networks Collector VM and Navigate to Power > Restart Guest OS