When querying "Firewall Rules order by hit count", no data displays for an NSX Manager

Products

• VCF Operations for Networks

Issue/Introduction

In Aria Operations for Networks, firewall rule statistics are not available.

Upon investigation in NSX manager, the Rules Statistics show the following error:

Error: General error has occurred. java.lang.NullPointerException (Error code:100). See screenshot as below.

 

Environment

Aria Operations for Networks 6.11
Aria Operations for Networks 6.12
Aria Operations for Networks 6.13
Aria Operations for Networks 6.14

Cause

This issue occurs due to how the federation Global manager imports new certificates for the local manager and does not update the old thumbprint in place on the Global manager, which causes communications issues between the Global managers and the Local managers.

Resolution

Follow KB 322476 NSX-T Federation Issues: DFW Statistics Not Visible and Local Manager UI Inaccessible via Quick Change Site Manager to resolve the issue in NSX.

Once Rule Statistics display without error in NSX, perform the following in Aria Operations for Networks GUI:

• In the Accounts and Data Sources page, toggle off the Data Collection option for the affected NSX-T data source.
• Wait for a minimum of 1 hour (60 minutes)
• In the Accounts and Data Sources page, toggle on the Data Collection option for the affected NSX-T data source
• Wait for a few hours and check if metrics are collecting. Metrics should display within 25 hours.