Aria Operations does not forward logs to Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Log forwarding is configured on Aria Operations to forward logs to Aria Operations for Logs (formerly known as vRealize Log Insight).
• In Aria Operations for Logs, you see logs received from other products in content dashboards but not from Aria Operations. For example:

• In the /var/log/loginsight-agent/liagent_date_timestamp.log of an Aria Operations node, you see following entries:

0x00007fb3edffb6c0 <error> CurlConnection:707 | Transport error while trying to connect to 'vrli.example.com': SSL peer certificate or SSH remote key was not OK
0x00007fb3edffb6c0 <trace> CFApiTransport:108 | Postponing connection to vrli.example.com:9543 by 200 sec.
0x00007fb3edffb6c0 <trace> CFApiTransport:128 | Re-connecting to server vrli.example.com:9543
0x00007fb3edffb6c0 <error> SSLVerifyContex:327| Issuer changed for certificate received from 'vrli.example.com', rejecting connection.
0x00007fb3edffb6c0 <error> CurlConnection:707 | Transport error while trying to connect to 'vrli.example.com': SSL peer certificate or SSH remote key was not OK
0x00007fb3edffb6c0 <trace> CFApiTransport:108 | Postponing connection to vrli.example.com:9543 by 269 sec.

Environment

Aria Operations 8.18.x 
Aria Operations for Logs 8.18.x 

Cause

This issue occurs when Aria Operations cannot establish trust with the certificate chain of Aria Operations for Logs.

Resolution

To resolve this issue, import certificate chain (root, intermediate and solution) for Aria Operations for Logs to Aria Operations in Administration > Control Panel > Trusted Certificates.

For instructions, please refer to Importing CA Certificates .