ESXi host is not able to establish a connection with the Aria Operations Cloud Proxies to forward logs to the Aria Operations for Logs.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• A Cloud Proxy has been deployed with log forwarding enabled.
• ESXi hosts have been configured to send syslog to this Cloud Proxy, however no logs from these hosts are arriving in Operations for Logs.
• The logs below indicates that the Aria Operations for Logs nodes are unavailable.
  • Filename:  /storage/log/var/log/haproxy-admin.log

2025-11-23T00:29:26+00:00 localhost haproxy[3261474]: 127.0.0.1:35620 [23/Nov/2025:00:29:26.313] PrxyRC_VRLI_FE~ PrxyRC_VRLI_BE/<NOSRV> 0/1/-1/-1/0 503 217 - - SC- 2/1/0/0/0 0/0 "POST /api/v2/events HTTP/1.1"

Environment

• VMware Aria Operations 8.18.x
• VMware Aria Operations for Logs 8.18.x

Cause

The Cloud Proxy is unable to communicate Aria Operations for Logs on port 9543.

Resolution

• Verify that port 9543 is open from CP to Operations for Logs nodes.
  • From CP: curl -v telnet://<Aria_Operations_for_Logs_IP>:9543

Additional Information

For more information, visit the Ports and Protocol page.