Many active queries on In Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• In the Aria Operations for Logs UI, the Management >> System Monitor >> Active Queries tab show many Precomputation queries.
  
  
• The /storage/core/loginsight/var/runtime.log contain a high number of the following messages (ClientInfo: ClientInfo(origin:CACHE_PRIMER)
  
  

  [2025-10-07 01:19:06.371+0000] ["LogSearchers-thread-80266"/###.###.###.### INFO] [com.vmware.loginsight.analytics.MultiLogSearcher] [Worker search complete. 
         piql: [SELECT COUNT(item0) FROM ((timestamp>=1859799517478 AND timestamp<=1859799692091) AND (FIELD_EXISTS(xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx) AND text=~"(^)?Severity: (?<xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>\w+)\, Category: \w+(\s+\w+)?\, MessageID: \w+\, Message:")) AS item0 WHERE APPEAR(item0)>0 GROUP BY item0.timestamp/1000.000000, item0.ixxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx HAVING COUNT(item0)>0 ORDER BY item0.timestamp ASC, COUNT(item0) ASC], 
         Token: ################, queryType: AQR, priority: (-10, 0, false, 1759799946367), from: 1, to: 50 
         ClientInfo: ClientInfo(origin:CACHE_PRIMER), 
         TimeRange: TimeRange(from:1859799517478, to:1859799692091) [duration(ms) 174613], 
         QueryCompletionTime(ms): 3, 
         bucketsInTimeRange: 12, bucketsRelevant: 12 [100.00%], 
         bucketsSearched: 1, bucketsInitialCacheHit: 0, bucketsCacheHits: 0, bucketsCacheMiss: 1 (0 Active), 
         bucketsReportingResults: 1, bucketsWithNonEmptyMessages: 0, bucketsWithNonEmptyGroups: 0, 
         totalTasks: 1, totalTaskBlockedTime (ms): 0, totalTaskExecutionTime (ms): 2, totalTasksCompleted: 1, 
         SearchersAcquired [AcquiredNonBlocking: 1, AcquiredBlocking: 0] [ReusedSearchers: 1, OpenedNewSearchers: 0] 
         AcquireSearcherTime(ms): 0, ActualSearchExecutionTime(ms): 2 
]

Environment

Aria Operations for Logs 8.18.x

Resolution

To address this issue disable cache priming on the cluster by following:

1. Open https://<OperationsForLogs>/internal/config, and check the "Show all settings" checkbox.
   
   
2. Go to the end of the XML, and add the following sub-section into the <config></config> section:
   
   <searcher>       
  <num-queries-to-prime-cache value="0" />     
</searcher>
   
   
3. Save the configuration and close the page.
   
   
4. Open the same page and make sure your configuration still exists (it may have been moved into a different location, so you'll have to search for it via browser 'find' tool).
   
   
5. Restart services on every cluster node one by one:
   service loginsight stop
service loginsight start