Unable to see Audit events in VMware Aria Operations.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• In VMware Aria Operations, Audit Events do not appear in the Operations > Audit events menu with following error message: "Audit Events are available for 0 out of 1 vCenter Servers from YYYY-MM-DDTHH:MM:SS.SSSS and YYYY-MM-DDTHH:MM:SS.SSSS:

 

Environment

VMware Aria Operations 8.18.x

Cause

The integration user account configured between VMware Aria Operations and VMware Aria Operations for Logs lacks the mandatory minimum permissions required within Aria Operations to retrieve and display audit data.

Resolution

To resolve this issue, ensure the integration user is assigned a role with the correct privileges:

• Log in to the VMware Aria Operations UI with administrative privileges.
• Navigate to Administration > Access > Roles.
• Create a new dedicated role (e.g., "Log Insight Integration Role").
• Assign the minimum required permissions to this role as specified in the official documentation: Minimum Required Permissions for the Local or AD User in VMware Aria Operations.
• Navigate to Administration > Access > User Accounts.
• Locate the integration user account used for the connection and assign the newly created role to it.
• Verify the fix by navigating to Operations > Audit events and confirming that events are now visible.

 

Additional Information

• Ensure that the troubleshooting steps mentioned on documentation: Troubleshooting Audit Events has been met.