Alert notification payload includes symptoms even when the conditions are not met in Aria Operations

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Custom alert is created to suppress disk specific alerts on specific virtual machines. This is achieved by cloning the out of the box alert 'Virtual machine guest file system running out of disk space' with following symptoms:
  
  
  
  
• Alert triggered in Aria Operations, contains only the expected symptoms for which the conditions are met:
  
  
  
  
  
  
• The alert content received in email notifications and the servicenow ticket contains additional symptoms. For example, this is a snippet from servicenow ticket:
  
  
  
  
• Test notification was triggered for one of the virtual machine's and in /storage/log/vcops/log/analytics-#####-#####-####-####-####.log of Aria Operations node, you see the content does include additional symptoms:
  
  

  DEBUG [pool-64-thread-6] org.apache.http.wire.wire - http-outgoing-9603 >> "{"records":[{"message_key":"#####-#####-#####-#####-#####","source":"Aria","event_class":"Aria <ariaops.example.com>","severity":"critical","resolution_state":"New","node":"Aria_Ops_Nodename","resource":"<VM_name.ariaops.example.com>","description":"Symptom Set - self\nSymptoms\n - Guest file system space usage at critical level (D:
Drive Excluded) | VM_name | #####-#####-#####-#####-##### \n guestfilesystem:C:
|percentage : 95.158 > 95.0\n\nSymptom Set - self\nSymptoms\n - Guest file system space usage at critical level | VM_name | #####-#####-#####-#####-##### \n guestfilesystem:C:
|percentage : 95.158 > 95.0\n\nConditions\nVM_name | #####-#####-#####-#####-##### \n CustomPropey|SuppressAllDiskAles = FalseSymptom Set - self\nSymptoms\n - Guest file system space usage at critical level (I:
Drive Excluded) | VM_name | #####-#####-#####-#####-##### \n guestfilesystem:C:
|percentage : 95.158 > 95.0\n\nSymptom Set - self\nSymptoms\n - Guest file system space usage at critical level (C:
Drive Only) | VM_name | #####-#####-#####-#####-##### \n guestfilesystem:C:
|percentage : 95.158 > 95.0\n\n","type":"vROps:Viualization\/Hypervisor","metric_name":"Viual Machine guest file system running out of disk space","additional_info":"

  {'resourceKind': 'ViualMachine','resourceId': '#####-#####-#####-#####-#####','adapterKind': 'VMWARE','resourceName': 'VM_name','VMEntityObjectID': 'VMMOREF','VCServer': 'Aria_Ops_Nodename','VMEntityVCID': 'Aria_Ops_Nodename = #####-#####-#####-#####-#####','staDate': 'Date-Timestamp','updateDate': 'Date-Timestampe','cancelDate': 'Unavailable','Health': '4.0','Risk': '1.0','Efficiency': '1.0','impact': 'health','ale_status': 'Active','aleURL': 'https:\/\/#.#.#.#\/vcf-operations\/ui\/inventory;mode=hierarchy;resourceId=#####-#####-#####-#####-#####;tab=ales-and-symptoms;subTab=ales;entityId=#####-#####-#####-#####-#####', 'aleDefinition' : 'Viual Machine guest file system running out of disk space'}

Environment

Aria Operations 8.18.3

Cause

This issue occurs when an alert definition contains multiple symptom sets and there are symptoms/conditions in thesymptom subset which are chained with AND, and any of the conditions doesn't meet. Product team has identified this is as a bug where the symptoms are included in the final notification payload data instead of clearing the one's where the conditions are not met.

Resolution

Broadcom is aware of this issue and this will be resolved in upcoming release of Aria Operations.