Search the VMware Knowledge Base (KB)
View by Article ID

VM fails to add in Dynamic Security Groups (2146757)

  • 0 Ratings
Language Editions

Symptoms

  • When multiple VMs are created or migrated to a different host about the same time, some of the VMs may not get added to NSX dynamic security groups defined in Service Composer even though they match the defined criteria.
  • In the NSX Manager vsm.log file, you see entries similar to:

    ERROR DCNPool-7 AbstractFlushingEventListener:324 - Could not synchronize database state with session org.hibernate.StaleObjectStateException: Row was updated or deleted by another transaction (or unsaved-value mapping was incorrect): [com.vmware.vshield.vsm.dynamicmembership.model.DynamicCriteria#dynamiccriteria-511] at org.hibernate.persister.entity.AbstractEntityPersister.check(AbstractEntityPersister.java:1934) at org.hibernate.persister.entity.AbstractEntityPersister.update(AbstractEntityPersister.java:2578) at org.hibernate.persister.entity.AbstractEntityPersister.updateOrInsert(AbstractEntityPersister.java:2478)


    Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Cause

This issue occurs when multiple VMs is added to the same security group(s) at the same time. The opportunistic locking mechanism for some of these VMs trigger due to the changes on the other VMs processing at the same time.  As a result, the modification of the security group to add the affected VM is discarded to avoid corrupting the database.

Resolution

This issue is resolved in VMware NSX for vSphere 6.3.0, available at VMware Downloads.

To work around this issue if you do not want to upgrade:
  • Edit the security group under Service Composer > Security Groups and complete the wizard with no changes.This triggers a re-evaluation of the security group membership.
  • In NSX for vSphere 6.2.2 or earlier versions, vMotion the affected VM to another host, which triggers a re-evaluation of the group membership.

See Also

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 0 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 0 Ratings
Actions
KB: