The "Hosts found" widget is counting hosts that do not have vSAN enabled

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

The Aria Operations for Logs dashboard VMware - vSAN > General shows an incorrect count in the Hosts found widget.

Clicking the Open in Explore Logs page button shows hosts that do not have vSAN enabled are appearing in the query "appname contains vsanmgmtsvc OR vsansystem OR vsansoapserver".

Environment

VMware Aria Operations for Logs 8.18.x

Cause

The ESXi hosts are sending syslog messages with the vsansystem appname even when vSAN is not enabled. This is designed behavior in ESXi due to the vSAN related methods being used within other functionalities.

Resolution

Utilize the other dashboards within the VMware - vSAN content pack to identify issues and ignore the Hosts found widget until the base query for the widget can be updated in a future version.