Unable to view logs for some tenants in the VCD portal

Products

• VMware vCloud Director 5.x
• VMware Aria Operations (formerly vRealize Operations) 8.x

Issue/Introduction

• You have different vCloud Director environments where each VCD instance is connecting to separate Aria Operations for Logs and NSX environments.
• NSX environments are configured the same way for logs forwarding with exception of the actual IP for Ops for Logs
• Only one of the two VCD instance is displaying firewall rules for edges
• If you capture the traffic on the NSX Edge switchport you can see syslog traffic to the configured IP on port 514 being sent
• On the destination VM you do not see the same packet from NSX Edge

Environment

Aria Operations 8.18.x
Aria Operations for Logs 8.18.x

Cause

A firewall, upstream from the NSX Edge, is blocking the sent packets to port 514.

Resolution

Allow traffic to pass from NSX Edges to the destination Ops for Logs IP on port 514

Additional Information

Syslog forwarding using Aria Operations Cloud Proxy for Log Forwarding is not working

Cloud Proxy not reporting to Aria for Logs