Error; 'vSphere log collection is not property configured for the specified log provider' received in Cloud Director

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• When attempting to query Distributed Firewall (DFW) logs within VMware Cloud Director (vCD) integrated with VMware Aria Operations for Logs, the following error is returned:
  

  vSphere log collection is not property configured for the specified log provider. Please properly configure vsphere to view distributed firewall logs

• This issue typically occurs in cross-forwarding architectures where the master forward instance (which is integrated with VCD) gathers logs from backline instances but lacks a direct vSphere integration mapping itself.

Environment

• Cloud Director 10.6.x
• Aria Operations for logs 8.18.x

Cause

VCD requires a valid vSphere integration to be configured directly on the VMware Aria Operations for Logs instance it is querying to successfully validate the log provider.

Resolution

1. Log in to the VMware Aria Operations for Logs Master forward instance (the specific instance integrated with VCD).

2. Navigate to the Integrations tab.

3. Create a new vSphere integration.

4. Explicitly disable the option to collect logs from vCenter and ESXi hosts within this new integration configuration. (This prevents data duplication, as the backline instances are already serving as the active collectors and forwarders of these logs).

5. Save the integration.

6. Return to VCD and verify that the Distributed Firewall logs are now successfully visible.