Error exporting logs to NFS resources in Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When exporting events from the Export Events Results in the Explorer Logs page that are above 20k events, the NFS would fail in different stages/percentages.

• The following error appears in the runtime.log under /storage/var/loginsight/
["EventExportThread"/###.##.###.## ERROR] [com.vmware.loginsight.logexport.exporter.ExportThread] [NFS related exception while exporting events]
java.nio.file.AccessDeniedException: /storage/core/loginsight/nfsmount/<id>/Task<id>_in_progress -> /storage/core/loginsight/nfsmount/<id></Task<id>.txt.tar.gz
        at sun.nio.fs.UnixException.translateToIOException(Unknown Source) ~[?:?]
        at sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source) ~[?:?]
        at sun.nio.fs.UnixCopyFile.move(Unknown Source) ~[?:?]
        at sun.nio.fs.UnixFileSystemProvider.move(Unknown Source) ~[?:?]
        at java.nio.file.Files.move(Unknown Source) ~[?:?]
        at com.vmware.loginsight.logexport.exporter.ExportThread.run(ExportThread.java:157) [log-export-service.jar:?]

Environment

VMware Aria Operations for Logs 8.x

Cause

In this example, the Aria Operations for Logs has no permission to rename files or use the command move (mv) in the NFS endpoint.

Resolution

This is due to permission issues with the NFS.

Please test all permissions required (create, delete, and rename/move) in Aria Operations for Logs and the NFS endpoint.

1. SSH to any Aria Operations for Logs node.

2. Manually mount the NFS to the /tmp directory.

   Note: If you have issues mounting the NFS, please see the KB: NFS archiving failures troubleshooting guide for vRealize Log Insight.

   mkdir /archive
   mount -t nfs archive-fileshare:archive_directory_path /archive

3. Create a file on the mounted NFS.

   touch filename

4. Rename (move) and delete the newly created file on the mounted NFS.

   mv filename new_filename
   rm new_filename