Alert mail 'Repository Retention Time triggered at YYYY-MM-DDThh:mm:ss.###Z' is sent from Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

You might receive an email like this.

This alert is about your VMware Aria Operations for Logs installation on https://#####/

Repository Retention Time triggered at  YYYY-MM-DDThh:mm:ss.###Z

At the current ingestion rate, VMware Aria Operations for Logs will provide ## days # hours of searchable log data on node #####. If you would like to retain searchable log data for a longer period of time at the current ingestion rate, you will need to add additional storage to the VMware Aria Operations for Logs virtual appliance on this node. The retention notification threshold can also be changed on the General Admin Configuration page. See the Online Help for instructions on how to increase storage of the appliance.

Environment

Aria Operations for Logs

Resolution

This could happen even though Aria Operations for Logs was working correctly.

It just indicates that the expected log retention time has became smaller than the threshold (default: 30 days). If the retention time for the log is smaller than you expected, please expand or add additional disk for Aria Operations for Logs to allow it to store logs for a longer period.

If you want to suppress the alert mail, there are two ways.

Disable alert mail:

Navigate [Configuration] -> [General], uncheck [ALERTS] -> [Retention Notification Threshold] -> [Send a notification when capacity drops below].

Reduce threshold of retention time:

Navigate [Configuration] -> [General], change [of data in system].