Unable to Export All Events from Aria Operations for Logs to NFS as a single file

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When exporting more than 20,000 events from the Explore Logs section in Aria Operations for Logs to an NFS server, not all events appear to be exported in a single file.

Environment

VMware Aria Operations for logs 8.x

Resolution

This behavior is expected and is due to the 'scrollSize' parameter, which is set to 20,000 by default. The 'scrollSize' defines the maximum number of log events included per export file.

If the total number of events within the selected time range exceeds 20,000, the export operation automatically splits the data into multiple files. For example: If there are 40,000 events, then the data will be split into two files.

Sample Output on NFS after exporting 40,000 events:

Note: The 'scrollSize' parameter is by default set to 20,000 and cannot be modified as it is defined by the product's design.