Applies To:

• VMware ESX 3 and later.
• VMware ESXi 5.5 and later.
• VMware vCenter 6.0 and later.

Overview

VMware is a virtualization and cloud computing software provider for x86-compatible computers. VMware virtualization is based on the ESX/ESXi bare metal hypervisor, supporting virtual machines. The term "VMware" is often used in reference to various VMware Inc. products such as VMware vCenter, VMware Workstation, VMware View, VMware Horizon Application Manager and VMware vCloud Director.

Providing log and audit coverage across VMware components can be difficult since each component of VMware writes audit logs and tasks in different ways. Within ESXi, the Tasks & Events pane provides a view into administrator activities; these can be fetched via an API; other information including performance is only available via syslog. At vCenter, its the Tasks & Events view that provides insight except for the SSO component where text files are written. EventTracker seamlessly aggregates all mentioned logging methods and assists in analysis and visualization aided by alerts, reports and dashboards.

EventTracker Knowledge Pack for VMware ESX/ESXi and vCenter server allows you to monitor the following:-

• Operations:- Virtual disk download, CPU usage, Memory usage and I/O errors.
• Security:- Failed logon attempt, Bypass attempt, Authentication failure and Configuration change.
• Compliance:- User role management, Host added or removed, Virtual machine created or removed and Account created or removed.

Once logs are received in to EventTracker Reports, Alerts and Dashboards can be configured into EventTracker.

The following Knowledge Packs are available in EventTracker v7 and later to support VMware ESX/ESXi and vCenter Server monitoring:

Scope

The configurations detailed in this guide are consistent with EventTracker Enterprise version 7.X and later, VMware ESX 3 and later,VMware ESXi 5.5 and later,VMware vCenter 6.0 and later.

Documentation:

For more information please refer the Integration guide