While Integrating Aria Operations for Logs (vRLI) with SDDC Manager, it fails with NSX Manager Log Insight Configuration failed.

Products

• VMware SDDC Manager

Issue/Introduction

While Integrating Aria Operations for Logs (vRLI) with SDDC Manager, it fails with NSX Manager Log Insight Configuration failed. 

Connect Operations for Logs to Domain task fails with:

Field    Details
Subtask    NSX Manager Log Insight Configuration
Status    Failed
Progress Message    Input Parameters for Syslog NSX configuration are erroneous
Error Message    Message: Input Parameters for Syslog NSX configuration are erroneous
Cause    Unauthorized (com.vmware.vapi.std.errors.unauthorized) => { error_message=The credentials were incorrect or the account specified has been locked., error_code=403, module_name=common-services, errorType=UNAUTHORIZED }

 

 

Upon checking the domain manager logs, we see that this occurs due to it picking it up incorrectly from the input spec:

var/log/vmware/vcf/domainmanager/domainmanager.log

YYYY-MM-DDTHH:MM:SS.508+0000 INFO  [vcf_dm,696082cb92ab9c20aa2ae98760771d2f,3ef5] [c.v.e.s.o.c.ProcessingOrchestratorImpl,dm-exec-1]  Prevalidation completed with failure, 2
YYYY-MM-DDTHH:MM:SS.511+0000 DEBUG [vcf_dm,696082cbedd253d59dc83ca56d6cb3c7,7fc6] [c.v.e.s.o.c.ProcessingTaskSubscriber,dm-exec-1]  Invoking task ConfigureSyslogInNsxtManagerAction.PREVALIDATE Description: NSX-T Manager Log Insight Confi
guration, Plugin: NsxtPlugin, ParamBuilder null, Input map: {nsxtManagerRemoteEndpoints=nsxApiEndpoints, logInsightTarget=logInsight.address}, Id: 0a122865-9abf-1048-819b-2ac974fb025c ...
YYYY-MM-DDTHH:MM:SS.513+0000 DEBUG [vcf_dm,696082cbedd253d59dc83ca56d6cb3c7,7fc6] [c.v.e.s.o.c.c.ContractParamBuilder,dm-exec-1]  Contract task NSX-T Manager Log Insight Configuration input: {"nsxtManagerRemoteEndpoints":[{"address":"#########","port":0,"username":"admin","password":"*****"},{"address":"##########","port":0,"username":"admin","password":"*****"},{"address":"#########","port":0,"username":"admin","password":"*****"}],"logInsightTarget":"##########"}
YYYY-MM-DDTHH:MM:SS.514+0000 DEBUG [vcf_dm,696082cbedd253d59dc83ca56d6cb3c7,7fc6] [c.v.v.s.c.s.SecurityConfigurationServiceImpl,dm-exec-1]  Security config retrieved {"fipsMode":false}
YYYY-MM-DDTHH:MM:SS.514+0000 DEBUG [vcf_dm,696082cbedd253d59dc83ca56d6cb3c7,7fc6] [c.v.v.c.n.s.c.c.ApiConnection,dm-exec-1]  Creating ApiClient to https://###########:443 with username admin

YYYY-MM-DDTHH:MM:SS.514+0000 DEBUG [vcf_dm,696082cbedd253d59dc83ca56d6cb3c7,7fc6] [c.v.v.c.n.s.c.c.ApiConnection,dm-exec-1]  Creating ApiClient to https://############:443 with username admin
YYYY-MM-DDTHH:MM:SS.515+0000 DEBUG [vcf_dm,696082cbedd253d59dc83ca56d6cb3c7,7fc6] [c.v.v.c.n.s.c.c.ApiConnection,dm-exec-1]  Created ApiClient connection to: ############
YYYY-MM-DDTHH:MM:SS.524+0000 ERROR [vcf_dm,696082cbedd253d59dc83ca56d6cb3c7,7fc6] [c.v.v.c.n.s.c.c.ComplexHelpers,dm-exec-1]  Exception occurred during NSX API invocation
java.util.concurrent.ExecutionException: com.vmware.vapi.std.errors.Unauthorized: Unauthorized (com.vmware.vapi.std.errors.unauthorized) => {
    messages = [],
    data = struct => {error_message=The credentials were incorrect or the account specified has been locked., error_code=403, module_name=common-services},
    errorType = UNAUTHORIZED
}

Environment

VCF 5.x

Cause

Incorrect credentials in the input spec for NSX-T Manager for admin user. 

Resolution

Validate the credentials in the input spec and restart the entire workflow. 

As a workaround, you can configure NSX syslog directly on VRLI and manually skip the task in SDDC. Contact Broadcom support to follow Kb 380670 to manually skip a subtask in SDDC Manager.