Security:vcenter logins by Administrator Alert is not appearing in VCF Operations 8.18.x

Products

• VCF Operations

Issue/Introduction

• It has been observed that the alert Security: vCenter Logins by Administrator is being forwarded from Aria Operations for Logs; however, it is not appearing in VCF Operations.
• For reference, a screenshot of the relevant configuration from Aria Operations for Logs is shown below.

Environment

Aria Operations 8.18.x

Aria Operations For Logs 8.18.x

Cause

This issue has been traced to the underlying policy associated with the alert, which is currently deactivated. Consequently, the alert is not being triggered as expected.

Resolution

To resolve this issue and allow the forwarded log alerts to appear in VCF Operations, follow these steps to enable the alert definition within your active policy:

1. Navigate to Policies: In the VCF Operations console, go to Configure > Policies (or Configurations > Policy Definition depending on your navigation view).

2. Select the Policy: Locate the active policy applied to your vCenter Server objects (e.g., vSphere Solution's Default Policy or your custom operational policy) and click Edit Policy.

3. Access Alerts & Symptoms: In the left-hand workspace pane, click on the Alerts and Symptoms tab.

4. Locate the Definition: Use the filter/search bar to search for "Notification" or the exact alert name: Security: vCenter Logins by Administrator.

5. Verify and Activate: Check the State column for the corresponding Alert Definition and its associated Notification Symptom:

   • If the state shows as Deactivated , click the status icon and change it to Activated  

6. Save Changes: Click Save to apply the updated policy configuration.