You have a few options with drawbacks that I'll list below.
- You can log directly in to Horizon Administrator and search events. This only shows the 2,000 most recent events and can be slow but works for one offs.
- Query the events SQL database. Unless you have the ability to use SQL reporting and build a dashboard this is good for one offs.
- Syslog/write connection servers logs to a file and query those. This would be my preferred choice if you already have logging infrastructure in place with an easy way to review/search/build reports.
Thanks guys for all the great answers
im going to look into both options and see which one works best for me im not an sql guy so this might be interesting
Another option is powercli if your famialr with it
$connectionServer=Connect-HVServer -Server $hvserver -User $hvuser -Password $hvPassword -Domain $hvDomain
$eventdb=Connect-HVEvent -DbPassword $eventDbPassword
$events=Get-HVEvent -HvDbServer $eventdb -TimePeriod week -UserFilter $userName
This will output a list of all events for that user, you would just need to add the correct settings for the variables. This require the vmware.hv.helper I believe
and I based this code of the work done in
I think this is easier that running sql queries, and I'm going to setup alerts based on this, currently we are doing an sql job for this.