Audit Logs for VM hardware Changes

[Issac08]

Hi All,

Is there any way to capture the audit logs for VM hardware changes (CPU\memory\Disk) in increasing or decreasing.?Want to get the logs from the vm deployment to vm decommision.

[vasan22in]

Hi,

You can do this in multiple ways, if you installed VMware vRealize Log Insight you can capture the logs. For VMware vRealize Log Insight license details, refer the below link.

https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2144909

If you don't have Log Insight, you need to manually create and configure Alarm for each VM Events and export the results. Refer the below link.

http://www.virtuallyghetto.com/2015/08/how-to-automatically-log-all-vm-configuration-changes-using-a-vcenter-server-alar…

Thanks,

Srini

[Issac08]

Apart from enabling alarms whether it can save in vcenter DB ?

[vasan22in]

which version of vCenter you are using, it's a Windows or VCSA appliance.?

[Issac08]

Its windows and 5.5 version

[Jitu211003]

Hi,

Setting the Log Level on vCenter Server Systems

To change log-level settings on vCenter Server, you must use the vSphere Client.

To set logging level for vCenter Server using the VMware vSphere Client

1	Log in to the vSphere Client and connect to the vCenter Server instance.

2	Choose Administration and click Server Settings > Logging Options.

3. Click ok.

Log Level Setting	Description
None	Disables logging.
Error	Logging limited to error messages.
Warning	Error messages plus warning messages are logged.
Info	Default setting on ESX/ESXi and vCenter Server systems. Errors, warnings, plus informational messages about normal operations are logged. Acceptable for production environments.
Verbose	Can facilitate troubleshooting and debugging. Not recommended for production environments.
Trivia	Extended verbose logging. Provides complete detail, including content of all SOAP messages between client and server. Use for debugging and to facilitate client application development only. Not recommended for production environments.

[Issac08]

Hi ,

Which level of logging provides the hardware changes.

[Jitu211003]

Versbose will give you a complete details about any changes done on the server.

However, not recommended for production as it take much resource to process these logs and may slow down your Vcenter performance.