Missing Logs from VMware Identity Manager (VIDM) in Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Logs originating from VMware Identity Manager (vIDM) were not being ingested and displayed as expected in Aria Operations for Logs. The syslog configuration on the vIDM appliance was validated against the Configure Syslog Servers for VMware Identity Manager 3.3.7 documentation and confirmed to be correctly implemented. However, when applying filters in Aria Operations for Logs using the vIDM node’s inventory name (as registered in vCenter), only a subset of log entries was returned, indicating incomplete or inconsistent log ingestion

Environment

Aria Operations for Logs 8.18.x
VMware identity Manager 3.3.7

Cause

The issue occurs because incorrect filtering criteria are used when searching for VMware Identity Manager (vIDM) logs in Aria Operations for Logs. Instead of referencing the correct log source identifiers (such as the hostname or syslog source IP), the filtering relies on the vIDM node’s inventory name from vCenter, which does not match how logs are indexed in Aria Operations for Logs. As a result, only partial or limited log data is retrieved

Resolution

To resolve this issue, use the VIDM Node FQDN or the Load Balancer (LB) FQDN, which can be found on the appliance configuration page <HTTPS://identitymanagerURL:8443/cfg/login> Identity Manager FQDN), to filter logs in Aria Operations for Logs