Alert notifications are still being sent despite the user’s email address was removed from the 'Email System Notifications' configuration in Aria Operations for Logs.
VMware Aria Operations for logs 8.x
The emails are triggered because the recipient address is configured under the Alert Definition and Scheduled Reports sections, which function independently of the Email System Notifications settings.
In Aria Operations for Logs, alert notifications can originate from multiple alert types, each capable of defining recipients independently:
System Alerts – Built-in alerts monitoring the health and operational status of the Aria Operations for Logs instance.
User-Defined Alerts – Custom alerts created based on specific log queries.
Content Pack Alerts – Predefined alert templates included within Content Packs (for example, NSX or vSphere Content Packs).
Email System Notifications define only the system-level notification settings, while alert definitions and reports maintain their own recipient lists. Therefore, removing the email address from Email System Notifications alone does not stop notifications generated by alert/report-level configurations. For detailed information on alert types and behavior, refer to the official documentation - Alerts in VMware Aria Operations for Logs