Search the VMware Knowledge Base (KB)
View by Article ID

vSAN Host Not Contributing Stats reports with SSL error (2150570)

  • 0 Ratings

Symptoms

  • You see a Warning in Cluster > Monitor > Virtual SAN > Performance service > All hosts contributing stats.
  • One or more ESXi hosts are listed in the Hosts Not Contributing Stats field.

Cause

This issues might occur is when there is an issue with the CA certificate which cause the SSL connection between hosts to fail. This failure will prevent collect vSAN stats metrics from these unconnected hosts.
 
To verify if this the issue, enable debug logging for vsanmgmt on the StatsMaster node (or/and one of the Not Contributing nodes).

To check which host is the StatsMaster:
  1. Log in as root to the ESXi.
  2. Run the following command to check the Perf Service Node information:

    python /usr/lib/vmware/vsan/perfsvc/vsan-perfsvc-status.pyc

    If the host is the StatsMaster, you will see the following line:

    isStatsMaster = true
 
To change the log level:
 
  1. Log in as root to the ESXi.
  2. Go to /etc/vmware/vsan/:

    cd /etc/vmware/vsan/

  3. Edit the vsanperf.conf file:

    vi vsanperf.conf

  4. Modify the following entries (Esc and :wq! to save and quit):

    loglevel = debug
    logrotate = 10


  5. Restart the vsanmgmt service:

    /etc/init.d/vsanmgmtd restart

    In the /var/log/vsanmmgt.log file, you will see the following error:

    VSANMGMTSVC: DEBUG vsanperfsvc[Collector-0] [statscollector::SampleHostStats] collecting remote stats for host 192.168.0.11 from VSI
    VSANMGMTSVC: DEBUG vsanperfsvc[Collector-1] [statscollector::RetrieveRemoteStats] Unexpected error during RetrieveRemoteStats:<class 'ssl.SSLEOFError'>
    VSANMGMTSVC: "/build/mts/release/bora-4192238/bora/build/esx/release/vmvisor/sys/lib/python2.7/site-packages/pyVmomi/SoapAdapter.py", line 1005, in __call__
    File "/build/mts/release/bora-4192238/bora/build/esx/release/vmvisor/sys-boot/lib/python2.7/ssl.py", line 911, in wrap_socket
    File "/build/mts/release/bora-4192238/bora/build/esx/release/vmvisor/sys-boot/lib/python2.7/ssl.py", line 579, in __init__
    File "/build/mts/release/bora-4192238/bora/build/esx/release/vmvisor/sys-boot/lib/python2.7/ssl.py", line 808, in do_handshake
    SSLEOFError: EOF occurred in violation of protocol (_ssl.c:590)

Note:  Ensure to change the log level to its previous value.

Resolution

To resolve the issue, renew the host certificate for each problematic node:

  1. Log in to the vCenter Server using the Web Client.
  2. Go to the Host and click > Manage > Settings > Certificate.
  3. Click Renew.
  4. Log in to the vCenter Server and restart the vsan-health service. This will renew and publish the certificate.

    • On Windows vCenter Server, use Service Manager.
    • On vCenter Server Appliance, run the command:

      service vmware-vsan-health stop
      service vmware-vsan-health start


  5. Ensure that the size of the CA file /etc/vmware/ssl/castore.pem is not zero byte in size.

The host must be Contributing Stats (may take up to 5 minutes as per collection interval).

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 0 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 0 Ratings
Actions
KB: