Aria Operations for Logs is triggering the 'IaaS Services Stopped' alert for Aria Automation

Products

• VMware Aria Suite

Issue/Introduction

• You may encounter an alert titled "IaaS Services Stopped" in Aria Operations for Logs when  "service stopped" messages are detected in the Aria Automation

Environment

Aria Operations for Logs 8.18
Aria Automation 8.18

 

Cause

This is a false positive alert and the cause of this alert is the presence of an outdated alert definition in Aria Operations for Logs that is not aligned with the architectural differences between Aria Automation 7.x and 8.x. 

Resolution

The "IaaS Services Stopped" alert is being triggered incorrectly due to the following:

Outdated Alert Definition: The criteria for this alert include specific component names such as "dem," "server," "mm," "agent," "ma," and "deo." These components are primarily associated with the architecture of older Aria Automation (vRealize Automation) 7.x versions and are not directly applicable to version 8.x.

Misinterpretation of "Agent" Logs: The alert query likely searches for the co-occurrence of the terms "stopped" and "agent." In Aria Automation 8.x logs, the term "agent" frequently refers to the Log Insight agent itself. Consequently, routine operations like the restart of the Log Insight agent are being falsely interpreted as a critical "IaaS Services Stopped" event.

Incompatibility with vRA 8.x Monitoring: The default alert queries are designed for monitoring the health of Aria Automation 7.x environments. They are not adequately tailored for the architectural changes in Aria Automation 8.x, leading to inaccurate alerts and potentially masking genuine issues. The current filter is not suitable for reliable health monitoring in version 8.x.

To resolve the issue: 

• Disable the alert "IaaS Services Stopped" in Aria Operations for Logs as this alert not valid for Aria Automation 8.x. View and Manage Alerts
• Install the latest VMware Aria Automation 8.12+ Content Pack. Import a Content Pack
• Configure the custom alert in Aria Operations for Logs to monitor Aria Automation 8.x services. Define an Alert