Cannot filter events by tags that are coming from Loginsight Windows agent when configuring forwarding rule after upgrading Aria Operations for Logs from 8.0.x to 8.18.x

Products

• VCF Operations

Issue/Introduction

• Navigate to Log Management > Log Forwarding > Edit existing forwarding rule > ADD FILTER > Previously created tag is not an option to select from the filter list
• No Agents are showing when navigating to Management > Agent 
• When checking the endpoint the agent is running an 8.0.x version and not the current 8.18.x version

Environment

Aria Operation for Logs 8.18.x

Resolution

1. Uninstall Loginsight agent from endpoint.  
2. Reinstall Loginsight agent on the endpoint as per KB How to install VMware Aria Operations for Logs agent.
3. Configure the new agent as per KB Unable to send the windows server logs to Aria Operations for logs
4. Edit the liagent.ini file to include tags. You can use the following documentation as a guide adding Tags Collect Logs from Windows Events Channels 
5. Create a new forwarding rule per your requirements. You can use the following documentation as a guide adding forwarding rule Add a VMware Aria Operations for Logs Log Forwarding Destination

Additional Information

You can use the following documentation as a guide to uninstall Loginsight agent on endpoint:

Uninstall the VMware Aria Operations for Logs Windows Agent