Tour the ATEN booth to see the the Latest Addition to the Modular Matrix Switch Series, New 4K HDMI Over IP Extender and more! Enter ATEN's Ultimate Giveaway Sweepstakes for a chance to win one of several great prizes, including an ATEN US7220 2-Port Thunderbolt 2 Sharing Switch!
Course Of The Month
2 days, 12 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
ESXi 5.0 repeating event user root logged in/out
Posted on 2012-12-23
Hi,
I have been dealing with ESXi hosts having problems with constantly repeating root logged in / logged out event. Every 10 seconds these events repeat:
I always managed to drain it down to some monitoring software, which was guilty for these logs, but this time I cannot find the real suspect.
I have VEEAM monitoring installed, so I killed ALL Veeam services.
After that, I only see repeating every 10 seconds:
Ok, there must be something else.
I monitor TCP connections and I only see my Vsphere CLIENT connected to remote port 443, nothing else. If I close vSphere Client, all those 443 port TCP connections go away.
But I was using it fine for years now...and all of the sudden...here we have this annoying event again.
I am frustrated because this repeating event pushes out the IMPORTANT waringn about storage deterioration problem, which I hunt for - but if I have just those "root logged out" events all over, I cannot watch for realy importan event.
Any idea?
I have been dealing with ESXi hosts having problems with constantly repeating root logged in / logged out event. Every 10 seconds these events repeat:
User root@1.2.3.4 logged in 23.12.2012 23:29:59
User root logged out 23.12.2012 23:30:16
I always managed to drain it down to some monitoring software, which was guilty for these logs, but this time I cannot find the real suspect.
I have VEEAM monitoring installed, so I killed ALL Veeam services.
After that, I only see repeating every 10 seconds:
User root logged out 23.12.2012 23:31:26
Ok, there must be something else.
I monitor TCP connections and I only see my Vsphere CLIENT connected to remote port 443, nothing else. If I close vSphere Client, all those 443 port TCP connections go away.
But I was using it fine for years now...and all of the sudden...here we have this annoying event again.
I am frustrated because this repeating event pushes out the IMPORTANT waringn about storage deterioration problem, which I hunt for - but if I have just those "root logged out" events all over, I cannot watch for realy importan event.
Any idea?
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
3
4 Comments
Active 7 days ago
ADDED:
After I restart host Management Agents, this issue stops...
...BUT I loose hardware status in vSphere client.
Seems like some vendor-specific MIB/CIM is not up to date.
After I restart host Management Agents, this issue stops...
...BUT I loose hardware status in vSphere client.
Seems like some vendor-specific MIB/CIM is not up to date.
Active today
I would change the root password, and see which of your applications, monitoring apps fails!
Active 7 days ago
Hmmm...
It all seems that monitoring behavior is weird.
I took some time to reboot host several times:
TEST "no monitors"
When ESXi rebooted without any monitoring software being connected to it, it was all fine.
TEST "veeam"
When ESXi rebooted AND there was VEEAM monitoring on remote server turned ON, still there is no issue, all normal.
TEST "orchestrator"
Well, with orchestrator and whole VMware suite, it was all the different story. As soon as my remote server has Orchestrator and surrounding services running, the "root logged in/out" problem begun immediately!
Weird thing is that even if I shut down ALL orchestrator and VMware* and vSphere* services on remote machine, the problem did not disappear. Actually it went down to show only "root logged out", but still filling event log.
Could not stop it.... except of rebooting host.
It all seems that monitoring behavior is weird.
I took some time to reboot host several times:
TEST "no monitors"
When ESXi rebooted without any monitoring software being connected to it, it was all fine.
TEST "veeam"
When ESXi rebooted AND there was VEEAM monitoring on remote server turned ON, still there is no issue, all normal.
TEST "orchestrator"
Well, with orchestrator and whole VMware suite, it was all the different story. As soon as my remote server has Orchestrator and surrounding services running, the "root logged in/out" problem begun immediately!
Weird thing is that even if I shut down ALL orchestrator and VMware* and vSphere* services on remote machine, the problem did not disappear. Actually it went down to show only "root logged out", but still filling event log.
Could not stop it.... except of rebooting host.
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
This article will show you how to create an ISO CD-ROM/DVD-ROM image (*.iso), and MD5 checksum signature, for use with VMware vSphere Hypervisor 6.5 (ESXi 6.5). It's a good idea to compare checksums, because many installations fail because of a corr…
Giving access to ESXi shell console is always an issue for IT departments to other Teams, or Projects. We need to find a way so that teams can use ESXTOP for their POCs, or tests without giving them the access to ESXi host shell console with a root …
This Micro Tutorial steps you through the configuration steps to configure your ESXi host Management Network settings and test the management network, ensure the host is recognized by the DNS Server, configure a new password, and the troubleshooting…
This Micro Tutorial walks you through using a remote console to access a server and install ESXi 5.1. This example is showing remote access and installation using a Dell server. The hypervisor is the very first component of your virtual infrastructu…
Suggested Courses
Course of the Month2 days, 12 hours left to enroll
Earn Certification
CompTIA IT Fundamentals
$49.00$44.10
695 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.