The VMs are being created using the thick client or web client.
Here is what I see when I inspect the logs.
SrcTemplate : VMware.Vim.VmEventArgument
Template : True
Key : 126971613
ChainId : 126971484
CreatedTime : 7/9/2019 2:26:57 PM
UserName : AZADOMAIN\azuritekevin
Datacenter : VMware.Vim.DatacenterEventArgument
ComputeResource : VMware.Vim.ComputeResourceEventArgument
Host : VMware.Vim.HostEventArgument
Vm : VMware.Vim.VmEventArgument
Ds :
Net :
Dvs :
FullFormattedMessage : Template template_v1 deployed on host esx-23
ChangeTag :
SrcTemplate : VMware.Vim.VmEventArgument
Template : True
Key : 126971487
ChainId : 126971484
CreatedTime : 7/9/2019 2:20:49 PM
UserName : AZADOMAIN\azuritekevin
Datacenter : VMware.Vim.DatacenterEventArgument
ComputeResource : VMware.Vim.ComputeResourceEventArgument
Host : VMware.Vim.HostEventArgument
Vm : VMware.Vim.VmEventArgument
Ds :
Net :
Dvs :
FullFormattedMessage : Deploying myvm on host esx-23 in L2 from template template_v1
ChangeTag :
2:24:12 is the time my Get-VM ran, so after the second event. There is a 6:57 min between the first and second event. Maybe this is due to the time it takes for Hardware and OS Customization since this is deployed from a template?