VMWare Events not containing some of the information needed
I have noticed that the some of the VmWare events do not contain the user information.
The following event was retrieved by Envision and does not contain the user information. Therefore, I will be unable to retrieve the information as to whom initiated a task on a Virtual Machine.
,Description=VirtualMachine.reconfigure,EventChainId=8727687,Key=task-51132,QueuedAt=[Mar 17 10 16:31:27],State=success,Name=ReconfigVM_Task,Target=XXXXXXX,StartedAt=[Mar 17 10 16:31:27]
When I look at the VM Center I see that the user information is part of the event. Is this configurable or Envision does not pull the information about the user whatsoever?
Some other events appear to be lacking the Target Name.
Has anybody seen anything similar?
From what I have been told, the data being returned by VMWare does not contain a user name. However, it does return an EventChain attribute which you can link back to the username.
DeviceType=vpx,Type=TaskEvent,Key=74887,User=Administrator,EventChain=74887,DataCenter=NGDC,Host=,VirtualMachine=,Description=Task: Initialize powering On
Unfortunately that field doesn't show up in the table which we are correcting now and you will see it in the April ESU.
Hope this helps.
Thanks for the information. That is pretty much what I have been doing lately. However, it appears that not all events are linked through the EventChain. I was able to find some username in events (on the VMWare V Center) that I did not see in Envision's logs. Hopefully, that will be address in future ESU.