You must synchronize the time on the VMware Aria Operations for Logs virtual appliance with an NTP server or with the ESX/ESXi host on which you deployed the virtual appliance.
Time is critical to the core functionality of VMware Aria Operations for Logs.
By default, VMware Aria Operations for Logs synchronizes time with a pre-defined list of public NTP servers. If public NTP servers are not accessible due to a firewall, you can use the internal NTP server of your company. If no NTP servers are available, you can sync time with the ESX/ESXi host where you have deployed the VMware Aria Operations for Logs virtual appliance.
Prerequisites
Verify that you are logged in to the VMware Aria Operations for Logs web user interface as a Super Admin user, or a user associated with a role that has the relevant permissions. See Create and Modify Roles for more information. The URL format of the web user interface is https://operations-for-logs-host, where operations-for-logs-host is the IP address or host name of the VMware Aria Operations for Logs virtual appliance.