Missing server name in Aria Logs alert notifications

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

While the alert triggers and sends email notifications with event details, the specific server name (hostname) is missing from the email subject and body.

Environment

Aria Operations for Logs 8.18.x

Cause

The alert definition does not have dynamic field variables to pull the source hostname into the notification template.

Resolution

Steps to include the server name / hostname in a triggered alert via Aria Operations for Logs:

1. Edit the alert definition and include the hostname variable in both the Alert Name and Description fields.
2. Dynamic fields needs to be entered in the format ${field_name} (e.g., ${hostname}).

 

Behavior after adding the variable syntax:

1. Email Notifications: Including the hostname in the name ensures that the email subject line reflects the specific server(s) involved (e.g., Alert for "hostname-01... and 1 more").
2. Integration with Aria Operations: If configured to send notifications to VMware Aria Operations, a separate notification event will now be generated for each unique hostname.

Additional Information

Impact: With multiple servers in an enterprise environment, cannot identify which specific server triggered the event, making troubleshooting difficult.

 

Limitations:

1. Field Limit: Only one static or extracted field can be added to the alert name or description.
2. Query Requirement: If an extracted field is used in the name, it must be part of the alert query and the "Group by" condition (if one exists).

Reference: Define an Alert