Security Information and Event Management (SIEM) system is reporting an excessive amount of logging generated by vCenter server. The amount of data produced is about 10k logs a minute,
vCenter 8.0U3
Sync losses and time discrepancies between hosts and the appliances increasing logging activity considerably.
The issue is covered in the following article:
vCenter HA (VCHA) may perform repeated failover operations every 5 to 10 minutes
Adjust the time and make sure all hosts and nodes are synchronized.
See:
vCenter HA (VCHA) may perform repeated failover operations every 5 to 10 minutes