Solved

VMWare vSphere Client - How do I see more events

Posted on 2013-11-14
6
3,477 Views
Last Modified: 2013-12-27
I am working in the vSphere Client on ESXi 5.1.

When I look at the events for the server (Home > Inventory > Inventory > events tab), it only shows about 24 hrs worth of events. I need to see further back than that.

How do I see more events, at least 2 weeks worth?
0
Comment
Question by:jjwolven
  • 3
  • 2
6 Comments
 
LVL 117
ID: 39648805
From your post it's possible you are just using VMware vSphere Hypervisor ESXi.

If you are connected directly to VMware vSphere Hypervisor ESXi, 24 hours of events, are all that's logged.

To see more events, these need to be logged and recorded in the VMware vSphere vCenter Database.

Do you have a VMware vSphere vCenter Server for Windows Server? (this is not free, evaluations are available for 60 days). It needs to be licensed.

So in Answer to your question, install, purchase or evaluate VMware vSphere vCenter Server for Windows Server.

see here
http://www.vmware.com/products/vcenter-server/
0
 
LVL 9

Expert Comment

by:dipopo
ID: 39650917
I would configure a syslog server to enable viewing historical data over a longer period. See below:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2003322
0
 
LVL 117
ID: 39650923
@dipopo Creating a Syslog server, sends the /var/log/vmkernel logs to the syslog server, not the Tasks and Events.

e.g. user logins are missing, creation of virtual machines are missing etc
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 9

Expert Comment

by:dipopo
ID: 39650941
Well I seem to think ESXi sends the alarms and events logs to syslog and you can always query logins via AD.

As syslog accepts "/var/log/vmkwarning.log: A summary of Warning and Alert log messages excerpted from the VMkernel logs."

Note: For clarification VOB and the corresponding service VOBD propagates kernel level errors to third-party applications. VOBD is a daemon that VMware and third-party applications use for monitoring and troubleshooting.
/var/log/vmkernel.log: Core VMkernel logs, including device discovery, storage and networking device and driver events, and virtual machine startup.

/var/log/vmkwarning.log: A summary of Warning and Alert log messages excerpted from the VMkernel logs.

/var/log/vmksummary.log: A summary of ESXi host startup and shutdown, and an hourly heartbeat with uptime, number of virtual machines running, and service resource consumption. For more information, see Format of the ESXi 5.0 vmksummary log file (2004566).
0
 

Author Comment

by:jjwolven
ID: 39706921
It should already be there, or do I need to set it up to push logs there?
0
 
LVL 117

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE) earned 500 total points
ID: 39707068
if you are referring to a syslog server, you need to build and configure a syslog server, and then configure the ESXi host to send it's current logs to the syslog server.

Do you have the free registered version of ESXi?

The events you want to record are these the events which appear in the vSphere Client Events Windows.

Because you may want to check the current logs, as posted above, to see if this is the information,  you want to review on a Syslog Server. It may not be what you are expecting to observe.

(also note, if you are using the FREE Registered version of ESXi, it does not support management confiugration changes, meaning, you may not even be able to configuire a Syslog External Server)
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

VM backup deduplication is a method of reducing the amount of storage space needed to save VM backups. In most organizations, VMs contain many duplicate copies of data, such as VMs deployed from the same template, VMs with the same OS, or VMs that h…
In this step by step tutorial with screenshots, we will show you HOW TO: Enable SSH Remote Access on a VMware vSphere Hypervisor 6.5 (ESXi 6.5). This is important if you need to enable SSH remote access for additional troubleshooting of the ESXi hos…
Teach the user how to install and configure the vCenter Orchestrator virtual appliance Open vSphere Web Client: Deploy vCenter Orchestrator virtual appliance OVA file: Verify vCenter Orchestrator virtual appliance boots successfully: Connect to the …
Teach the user how to join ESXi hosts to Active Directory domains Open vSphere Client: Join ESXi host to AD domain: Verify ESXi computer account in AD: Configure permissions for domain user in ESXi: Test domain user login to ESXi host:

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now