VMware Aria Operations for Logs sends daily email alert notifications reporting an auto-configuration failure.
The alert details show:
vCenter auto-configuration failed – Failed to configure ESXi host <ESXi_FQDN or IP>Out of multiple ESXi hosts managed by the vCenter Server, the failure specifically impacts one or a subset of ESXi hosts, while all other hosts complete auto-configuration successfully.
The error occurs following an upgrade of vCenter Server / ESXi hosts or certificate/configuration changes.
ESXi 9.x populates the syslog parameter and appends the syslog address with: udp://##.##.##.##:514?formatter=RFC-1364
Aria Operations for Logs 8.x does not process the appended parameter ?formatter=RFC-1364, causing auto-configuration alerts to trigger.
Follow these steps to resolve the issue:
Disable automatic ESXi host configuration in Aria Operations for Logs:
VIEW DETAILS.SAVE in the upper-right of the UI.Update Syslog configuration in vSphere Client:
EDIT in the upper-right of the UI.Syslog.global.logHost (around page 33 of the configurations).Example Configuration:
Before:
udp://##.##.##.##:514?formatter=RFC-1364tcp://##.##.##.##:514?formatter=RFC-1364
After:udp://##.##.##.##:514tcp://##.##.##.##:514