audit events are very useful for knowing the state changes in an environment, so we cannot neglect them
I haven't seen this specific " vsan.net.vnic.added.formatOnHost not found "
when we add/remove a vsan vnic you should see this audit logs
- [esx.audit.vsan.net.vnic.added] VSAN vnic added
- [esx.audit.vsan.net.vnic.deleted] VSAN vnic deleted
- An event (esx.audit.vsan.net.vnic.added) could not be sent immediately to hostd; queueing for retry.
what i would suggest is to two things
- check the corresponding kernel vob messages( /var/log/vobd.log), look for any additional details, record the timestamp and co-relate the time with vmkernel logs for the reason behind this msg
- second check whether the vsan cluster/ vsan nic currently exists and cluster is in healthy state.
Thanks,