If the admin password of vRealize Log Insight (VRLI) i.e. VMware Aria Operations for Logs is changed from SDDC Manager, the vRealize Operations Manager (VROPS) is unable to connect to VRLI.

Snippets from logs  /var/log/vmware/vcf/operationsmanager/operationsmanager.log:

2024-02-10T06:11:23.786+0000 DEBUG [vcf_om,d752vx11y42751m9,371c] [c.v.v.secure.http.HttpClientService,om-exec-23] Making request: POST https://vrlih-22:9543/api/v1/sessions
2024-02-10T06:11:23.786+0000 DEBUG [vcf_om,d752vx11y42751m9,371c] [c.v.v.secure.http.HttpClientService,om-exec-23] Received response: for POST request with host: vrlih-22, port: 9543, isSecure: true, path: /api/v1/sessions, queryParamMap: null, headers: {Accept=application/json, Content-Type=application/json}
2024-02-10T06:11:23.786+0000 DEBUG [vcf_om,d752vx11y42751m9,371c] [c.v.v.secure.http.HttpClientService,om-exec-23] Response Body: {“errorMessage”:”Invalid credentials or account is locked.”,”errorCode”:”FIELD_ERROR”}

After rotating the VRLI password, the new password were not synced back to VROPS.

Resolution/Solution:

Unlock the VRLI admin account by running the below command on the VRLI server

/usr/lib/loginsight/application/sbin/li-reset-admin-passwd.sh –unlockAdmin

Next, log in to VROPS UI and update the new VRLI password.