Security Services Platform is not Visualizing Flows

Products

• VMware vDefend Firewall

Issue/Introduction

• No flows seen on Security explorer page on SSP UI
• host Transport node has connectivity to SSP ingress and messaging on 443 and 9092 respectively.
• data collection is enabled on SSP UI for desired cluster.
• spark-app-rawflow-driver log shows no flows being ingested, no full sync completing, don't see data received.

2026-02-19T14:47:00.598Z  INFO spark-listener-group-streams AccumulatorStoreStructuredImpl - Metric COMPLETED_FLOWS : LongAccumulator(id: 2, name: Some(COMPLETED_FLOWS), value: 0)

2026-02-19T14:55:45.616Z  INFO spark-listener-group-streams AccumulatorStoreStructuredImpl - Metric TOTAL_CONFIG_SYNC_GUARDRAIL_DROPPED : LongAccumulator(id: 0, name: Some(TOTAL_CONFIG_SYNC_GUARDRAIL_DROPPED), value: 0)

2026-02-19T14:55:45.617Z  INFO spark-listener-group-streams AccumulatorStoreStructuredImpl - Metric TIMESTAMP_FILTERED : LongAccumulator(id: 12, name: Some(TIMESTAMP_FILTERED), value: 0)

• host Transport Node shows service disabled

[root@esx:~] nsxcli -c get intelligence flow stats
Wed Feb 18 2026 UTC 14:56:05.459
             NSX Intelligence Host Flows Statistics
-----------------------------------------------------------------
Service is disabled.

[root@esx:~] nsxcli -c get intelligence flow stats ack
Wed Feb 18 2026 UTC 14:56:20.101
             NSX Intelligence Host Flows Acknowledgement Statistics
--------------------------------------------------------------------------------
     host uuid: a707####-####-####-####-#####5e1d13b
     host type: nsx-esx(1)

Service is disabled.

Environment

SSP 5.1

Resolution

• From the SSP UI, System > Data Collection > Host clusters. deactivate and reactivate data collection for affected cluster.
• Verify on host Transport node, if flows are sent.

[root@esx:~]  nsxcli -c get intelligence flow stats ack
Thu Feb 19 2026 UTC 15:25:29.686
             NSX Intelligence Host Flows Acknowledgement Statistics
--------------------------------------------------------------------------------
     host uuid: a707####-####-####-####-#####5e1d13b
     host type: nsx-esx(1)

     Topic        Total Sent     Total Ack'ed      Last Sent      Last Ack'ed      Last Sent Time       Last Ack Time
   raw_flow           180             180             108             180       2026-02-19 15:21:57  2026-02-19 15:21:59

• Verify on SSP UI, Monitor & Plan > Security Explorer > Security Explorer > Discover (select Computes from drop down). if flows are visible.