"Expired Host License" alert incorrectly triggered for ESXi host on Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

The following email notification is observed 

 yyyy-mm-dd hh:mm:ss.064 esxi.broadcom.com vcenter-server: Alarm 'Expired host license' on esxi.broadcom.com triggered an action

Environment

Aria Operations for Logs 8.18.x

Cause

Stale syslog data or a disruption in the log forwarding mechanism causes Aria Operations for Logs to process or display the outdated alert state.

Resolution

 You can force VMware Aria Operations for Logs to reapply the syslog configuration to your ESXi hosts using the built-in vSphere Integration feature. To reconfigure the ESXi syslog, follow these steps:

1. Log in to the VMware Aria Operations for Logs web user interface as an administrator.
2. Navigate to the Administration page by clicking the gear icon or the menu in the top-right corner.
3. Select vSphere under the Integration section on the left-hand menu.
4. Locate the vCenter Server that manages the affected ESXi host in the list of connected vSphere environments.
5. Expand the configuration pane for that specific vCenter Server.
6. Locate the checkbox labeled Configure ESXi hosts to send logs to Aria Operations for Logs.
7. Click the Advanced Options link next to this setting to view the list of individual ESXi hosts.
8. Filter or scroll to find the specific ESXi host experiencing the issue.
9. Select the host and click Unconfigure to remove the stale syslog settings.
10. Wait a few moments for the task to complete, then select the host again and click Configure to push a fresh syslog configuration to the ESXi host.

Additional Information

Configure an ESXi Host to Forward Log Events to VMware Aria Operations for Logs