Monitoring ESX environment

ITSBCD ITSBCD
ITSBCD ITSBCD used Ask the Experts™
on
Dear All,
I am monitoring ESX logs on a test environment,however I am receiving lot of logs
I need to focus on security logs only
What kind of logs should I look for?Any help?
IN case i want to know if a virtual machine was created,where to look for?
Any tips on monitoring a vmware ESX?
Regards
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization Consultant
Fellow 2018
Expert of the Year 2017
Commented:
Do you have vCenter Server, the Audit logs are written to vCenter Server.

Security Logs for the host are in /var/log

https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-9BBC8AA0-4533-4943-AEF5-6A8BC64D7A5D.html
VMware Engineer | vExpert 18/19
Distinguished Expert 2018
Commented:
Please be specific interms on Security or Audit

You can create VM from vCenter and also ESXi host directly.. In that scenario, you need to check both vcenter and esxi host logs..

If you are sure that the vm is created directly from esxi host only, then only auditing esxi host logs should suffice here

In terms of auditing, do you want to check who is logging in and logging out or who is initiating the task

login/logout info are under the /var/log/shell.log and /var/log/auth.log

If you are trying to check the task info and task created owner, it is the hostd.log but it has lot of data .. you need specific strings for each audit case to filter

You can use VMware log insight where the above is use case to filter and create the report


Thanks,
MS

Author

Commented:
Thank you guys.Helpfull
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization Consultant
Fellow 2018
Expert of the Year 2017

Commented:
no problems

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial