vmkernel.og events not logging in Log Insight Explorer.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Several hosts are displaying events in the Log Insight Explorer, while a few are not with identical configurations.
• There are no apparent errors in the log bundles.
• The vCenter Advanced Settings page indicates that syslog forwarding is enabled.

 

Environment

Aria Operation for Logs 8.18.x

Cause

TCP port 514 is blocked by firewall between the host and Log Insight.

Resolution

Hosts that did not show in the Log Insight Explorer requires port 514 to be unblocked from firewall for both UDP and TCP.