Flows are not accurate and have missing flows during exports

Products

• VMware Aria Operations for Networks

Issue/Introduction

Post upgrade of Aria Operations for Networks, the query "NSX Firewall Rules order by hit count" filtered on "Now", which usually returns data, displays no data.

When running the query "NSX Firewall Rules order by hit count" filtered by "Last week"  returns the hit count metric data for all NSX firewall rules in the environment, the graph cuts off around the time the upgrade to completed.

The export of the data shows rows that contain only hit count data (highlighted yellow in the image below).

Environment

Aria Operations for Networks 6.10
Aria Operations for Networks 6.11
Aria Operations for Networks 6.12
Aria Operations for Networks 6.13
Aria Operations for Networks 6.14

Cause

To align Aria Operations for Networks entity types to NSX 4.x, Aria Operations for Networks 6.11 and above assigns all discovered NSX Firewall Rules from a NSX 4.x data source to the "NSX Policy Firewall Rule" entity type instead of "NSX Firewall Rule". 

The "NSX Firewall Rule" query returns only "NSX-V Firewall" and "NSX Firewall" (NSX-T) Entity Types and does not include "NSX Policy Firewall Entity" Types.

Resolution

After upgrading to Aria Operations for Networks 6.11+, use the query "Firewall Rules" or "Rules" to return all firewall rules in the environment and filter by Entity Type as needed instead of "NSX Firewall Rules".

Additional Information

Entity Types assigned in Aria Operations for Networks by version based on NSX version

Entity Type	Aria Operations for Networks versions <= 6.10 NSX Version	Aria Operations for Networks versions >= 6.11 NSX Version
NSX Firewall Rule	NSX 3.x, NSX 4.x	NSX 3.x
NSX Policy Firewall Rule	NSX 3.x, NSX 4.x	NSX 3.x, NSX 4.x

 

Entity Types returned by Aria Operations for Networks Queries based on Aria Operations for Networks version

Query	Aria Operations for Networks versions <= 6.10 Entity Types Returned	Aria Operations for Networks versions >= 6.11 Entity Types Returned
Rules	NSX-V Firewall Rule + NSX Firewall Rule + NSX Policy Firewall Rules + Physical Firewall Rule	NSX-V Firewall Rule + NSX Firewall Rule + NSX Policy Firewall Rule + Physical Firewall Rule
Firewall Rules	NSX-V Firewall Rule + NSX Firewall Rule + NSX Policy Firewall Rule + Physical Firewall Rule	NSX-V Firewall Rule + NSX Firewall Rule + NSX Policy Firewall Rule + Physical Firewall Rule
NSX Firewall Rules	NSX-V Firewall Rule + NSX Firewall Rule	NSX-V Firewall Rule + NSX Firewall Rule
NSX Policy Firewall Rules	NSX Policy Firewall Rule	NSX Policy Firewall Rule