Environment Monitoring Flow Details Returns No Results, Flow Export Fails.

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

When viewing the Environment Monitoring page and navigating to flow details, the result is empty. When the flow export job is triggered from the same screen, the job fails.

 

Empty environment monitoring flow details result:

 

Failed Job: 

Environment

SSP 5.1 in an environment with large amount of flows between environment pairs.

Cause

The amount of data we're collecting to support environment flow details and export causes the Druid Broker pod to OOM when the flow volume is sufficiently high. The pod crashing causes the query to fail.

To identify that this is the root cause, navigate to the flow details page or trigger the export job while watching the health of the Druid Broker pod via:

1. SSH into SSPI via sysadmin account.
2. Watch the druid-broker pod
   1. k -n nsxi-platform get pods | grep druid-broker
3. Trigger the action again, ether reload the flow details page or trigger a new export job
4. Observe one of the Broker pods will restart while waiting for the page to load or the job to complete
   

For additional information, you can tail the log of the visualization pod or the export job pod:

1. SSH into SSPI via root or sysadmin as per 5.0 / 5.1 versions
2. Get the pod name
   1. (for flow details) k -n nsxi-platform get pods | grep visualization
   2. (for export job) k -n nsxi-platform get pods | grep export
3. Tail the logs
   1. k -n nsxi-platform logs -f <pod name>

 

You may observe some query related error like the following:

INFO [https-jsse-nio-172.X.X.X-8443-exec-9] c.v.n.p.v.l.u.LatestFlowQueryUtils: INTELLIGENCE [nsx@4413 comp="nsx-manager" level="INFO" subcomp="nsxi"] Querying flow keys records completed in 3245ms., record size:1000000
2025-10-09T16:13:35,399 ERROR [https-jsse-nio-172.X.X.X-8443-exec-8] c.v.n.p.v.s.AbstractCorrelatedFlowQueryServiceImpl: INTELLIGENCE [nsx@4413 comp="nsx-manager" errorCode="INT910001" level="ERROR" subcomp="nsxi"] Exception com.vmware.nsx.pace.common.exceptions.DruidQueryException: Druid Exception: Druid Query Exception when executing query.

Resolution

Please contact Broadcom support for further action.