Solved

ESXi 5.0 repeating event user root logged in/out

Posted on 2012-12-23
4
2,667 Views
Last Modified: 2012-12-29
Hi,

I have been dealing with ESXi hosts having problems with constantly repeating root logged in / logged out event. Every 10 seconds these events repeat:
User root@1.2.3.4 logged in  23.12.2012 23:29:59   
User root logged out 23.12.2012 23:30:16

Open in new window

1.2.3.4 is my monitoring server's public IP address.

I always managed to drain it down to some monitoring software, which was guilty for these logs, but this time I cannot find the real suspect.

I have VEEAM monitoring installed, so I killed ALL Veeam services.
After that, I only see repeating every 10 seconds:
User root logged out 23.12.2012 23:31:26

Open in new window


Ok, there must be something else.
I monitor TCP connections and I only see my Vsphere CLIENT connected to remote port 443, nothing else. If I close vSphere Client, all those 443 port TCP connections go away.

But I was using it fine for years now...and all of the sudden...here we have this annoying event again.
I am frustrated because this repeating event pushes out the IMPORTANT waringn about storage deterioration problem, which I hunt for - but if I have just those "root logged out" events all over, I cannot watch for realy importan event.

Any idea?
0
Comment
Question by:Andrej Pirman
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 18

Author Comment

by:Andrej Pirman
ID: 38717552
ADDED:
After I restart host Management Agents, this issue stops...
...BUT I loose hardware status in vSphere client.

Seems like some vendor-specific MIB/CIM is not up to date.
0
 
LVL 120
ID: 38717595
I would change the root password, and see which of your applications, monitoring apps fails!
0
 
LVL 18

Accepted Solution

by:
Andrej Pirman earned 0 total points
ID: 38719283
Hmmm...

It all seems that monitoring behavior is weird.
I took some time to reboot host several times:

TEST "no monitors"
When ESXi rebooted without any monitoring software being connected to it, it was all fine.

TEST "veeam"
When ESXi rebooted AND there was VEEAM monitoring on remote server turned ON, still there is no issue, all normal.

TEST "orchestrator"
Well, with orchestrator and whole VMware suite, it was all the different story. As soon as my remote server has Orchestrator and surrounding services running, the "root logged in/out" problem begun immediately!
Weird thing is that even if I shut down ALL orchestrator and VMware* and vSphere* services on remote machine, the problem did not disappear. Actually it went down to show only "root logged out", but still filling event log.
Could not stop it.... except of rebooting host.
0
 
LVL 18

Author Closing Comment

by:Andrej Pirman
ID: 38728933
Hanccocka gave me an advice, but from my initial question it was clear, that I was already past suggested solution, therefore despite of good intention, I decided not to reward his suggestion.<br />Thanx anyway!
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
New Relic 3 56
Hyper v or VMWare Player? 11 149
ESXi 5 VM / Server 2008 R2 loses network connection after reboot 9 119
patch update 11 63
Will try to explain how to use the VMware feature TAGs in the VMs and create Veeam Backup Jobs using TAGs. Since this article is too long, I will create second article for the Veeam tasks.
In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
Teach the user how to edit .vmx files to add advanced configuration options Open vSphere Web Client: Edit Settings for a VM: Choose VM Options -> Advanced: Add Configuration Parameters:
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question