Extracted Fields from "NSX-T events for VMware Cloud SDDC" and "VMware - NSX-T for VMware Cloud on AWS" Content Pack Show Unknown in Aria Operations for Logs SaaS UI

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• The Extracted Field vmw_vmc_nsxt_firewall_ruleid from the "NSX-T events for VMware Cloud SDDC" Content Pack was not functioning as expected. 

• The field was not listing data and showed a "No Data Available" and "Unknown" message and this issue affects the ability to filter and analyze NSX-T firewall events.

Environment

• Aria Operations for Logs SaaS

Cause

• The underlying fields API within Aria Operations for Logs was not returning a complete or correct response for extracted fields. 

• This internal API issue directly prevented the vmw_vmc_nsxt_firewall_ruleid and other NSX-T-related extracted fields from properly populating data or being listed in the Aria Operations for Logs user interface for selection and filtering.

Resolution

• No specific user action was required to resolve this issue. 

• The problem was identified and resolved internally within the Aria Operations for Logs SaaS environment by Broadcom Engineering.