sso.LoginFailure event show different severity on vSphere Client and Aria Operations for Logs.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Regarding sso.LoginFailure event:

• On vSphere Client, the "Type" is "Error":
  
  
  
  
  
• On Aria Operations for Logs, the same event's "vc_event_severity" is "info":
  
  

Environment

Aria Operations for Logs 8.x

vCenter Server 8.x

Cause

In vCenter Server Event database, the “Severity” is "info" for this event "sso.LoginFailure"

 

vSphere Client display "error" as type but not severity.

Resolution

This is an expected behavior.