Getting email notification for Admin Alert: SSL Certificate Error and unable to find the alert definition to modify

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Getting email alerts due to a security system probing Aria Logs instance.
• The email generated is similar to below

SUBJECT:

VMware Aria Operations for Logs Admin Alert: SSL Certificate Error

BODY:

This alert is about your VMware Aria Operations for Logs installation on https://example.com/

SSL Certificate Error triggered at YYYY-MM-DDTHH:MM:SS.###Z

Syslog client <security_appliance_IPorHostname>  disconnected due to a SSL handshake problem. This may be a problem with the SSL Certificate or with the Network Time Service. In order for VMware Aria Operations for Logs to accept syslog messages over SSL, a certificate that is validated by the client is required and the clocks of the systems must be in sync.

Log messages from <security_appliance_IPorHostname> are not being accepted, reconfigure that system to not use SSL or see Online Help for instructions on how to install a new SSL certificate .

This message was generated by your VMware Aria Operations for Logs installation, visit the Documentation Center for more information.

• Trying to go to the alert definition and exclude the security appliances, but cannot find this specific alert to modify.

Environment

Aria Operations for Logs 8.18.x

Cause

This is a System Alert which does not have the ability to be modified 

Resolution

Temporarily disable the  "SSL Certificate Error"  alert in the Alerts > System Alerts page until an exception is added in the security system

Additional Information

Connectivity between Aria Operations for Logs application and vCenter Server application