Error exporting logs to NFS resources in Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When exporting events from the Export Events Results in the Explorer Logs page that are above 20k events, the NFS would fail in different stages/percentages.

• The following error appears in the runtime.log under /storage/var/loginsight/
["EventExportThread"/172.27.179.60 ERROR] [com.vmware.loginsight.logexport.exporter.ExportThread] [NFS related exception while exporting events]
java.nio.file.AccessDeniedException: /storage/core/loginsight/nfsmount/<id>/Task<id>_in_progress -> /storage/core/loginsight/nfsmount/<id></Task<id>.txt.tar.gz
        at sun.nio.fs.UnixException.translateToIOException(Unknown Source) ~[?:?]
        at sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source) ~[?:?]
        at sun.nio.fs.UnixCopyFile.move(Unknown Source) ~[?:?]
        at sun.nio.fs.UnixFileSystemProvider.move(Unknown Source) ~[?:?]
        at java.nio.file.Files.move(Unknown Source) ~[?:?]
        at com.vmware.loginsight.logexport.exporter.ExportThread.run(ExportThread.java:157) [log-export-service.jar:?]

Environment

Aria Operations for Logs 8.x

Cause

In this example, the Aria Operations for Logs has no permission to rename files or use the command move (mv) in the NFS endpoint.

Resolution

This is due to permission issues with the NFS.
Please test all permissions required (create, delete and rename(move)) in Aria Operations for Logs and the NFS endpoint.

1. SSH to any Aria Operations for Logs node
2. Manually mount the NFS to the /tmp directory
   • If you have issues mounting the NFS, please see the KB: NFS archiving failures troubleshooting guide for vRealize Log Insight

mkdir /archive
mount -t nfs archive-fileshare:archive directory path /archive

     3. Create a file on the mounted NFS

touch filename

     4. Rename (move) and Delete the newly created file on theand delete the newly created file on the mounted NFS

Rename (move): mv filename new_filename
Delete: rm new_filename